Cisco Unified Communications Java Class File Information Disclosure Vulnerability

Bugtraq ID:	65644
Class:	Design Error
CVE:	CVE-2014-0731
Remote:	Yes
Local:	No
Published:	Feb 18 2014 12:00AM
Updated:	Feb 21 2014 02:20AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Java Class File Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to an information-disclosure vulnerability because it fails to sufficiently enforce authentication.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco BugId CSCum46497.

Cisco Unified Communications Java Class File Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Java Class File Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Java Class File Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )