Lucene search
CiscoCVE-2014-8008HistoryJan 22, 2015 - 2:01 p.m.
CVE-2014-8008
2015-01-2214:01:14
CWE-200
cisco
web.nvd.nist.gov
27
cscur49414
cve-2014-8008
cisco
unified communications
api
vulnerability
security
file read
path traversal
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.2%
Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.
Affected configurations
Node
ciscounified_communications_manager
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-8008
2015-01-22 14:01:14
prion
prion
Path traversal
2015-01-22 14:01:00
cvelist
cvelist
CVE-2014-8008
2015-01-22 11:00:00
cisco
cisco
exploitdb
exploitdb
Cisco Unified Communications Manager - Multiple Vulnerabilities
2015-08-18 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:C/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.2%
Related for CVE-2014-8008