Cisco Unity Connection CVE-2014-2145 Directory Traversal Vulnerability

Bugtraq ID:	66676
Class:	Input Validation Error
CVE:	CVE-2014-2145
Remote:	Yes
Local:	No
Published:	Apr 04 2014 12:00AM
Updated:	Apr 04 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unity Connection CVE-2014-2145 Directory Traversal Vulnerability

Cisco Unity Connection is prone to a directory-traversal vulnerability.

Exploiting this issue can allow an attacker to gain access to arbitrary files. Information harvested may aid in launching further attacks.

This issue is being tracked by Cisco Bug ID CSCun91071.

Cisco Unity Connection CVE-2014-2145 Directory Traversal Vulnerability

An attacker can exploit this issue using a web browser.

Cisco Unity Connection CVE-2014-2145 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unity Connection CVE-2014-2145 Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )