Cisco Unified Contact Center Express CVE-2014-2102 Information Disclosure Vulnerability

Bugtraq ID:	65797
Class:	Design Error
CVE:	CVE-2014-2102
Remote:	Yes
Local:	No
Published:	Feb 25 2014 12:00AM
Updated:	Mar 04 2014 01:02AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Contact Center Express CVE-2014-2102 Information Disclosure Vulnerability

Cisco Unified Contact Center Express is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco BugId CSCum95575.

Cisco Unified Contact Center Express CVE-2014-2102 Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Contact Center Express CVE-2014-2102 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Contact Center Express CVE-2014-2102 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )