Cisco Unified Communications Manager CVE-2013-1240 Local Information Disclosure Vulnerability

Bugtraq ID:	59651
Class:	Input Validation Error
CVE:	CVE-2013-1240
Remote:	No
Local:	Yes
Published:	May 03 2013 12:00AM
Updated:	May 02 2014 04:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Manager CVE-2013-1240 Local Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to read arbitrary files and obtain sensitive information. This may lead to further attacks.

This issue is documented by the Cisco bug ID's CSCue25770, CSCuh00765 and CSCun74412.

Cisco Unified Communications Manager CVE-2013-1240 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2013-1240 Local Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2013-1240 Local Information Disclosure Vulnerability

References:

• Cisco Unified Communications Manager (CallManager) (Cisco)