Cisco Unified Communications Manager CVE-2014-2185 Information Disclosure Vulnerability

Bugtraq ID:	67099
Class:	Design Error
CVE:	CVE-2014-2185
Remote:	Yes
Local:	No
Published:	Apr 28 2014 12:00AM
Updated:	May 02 2014 12:50AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Manager CVE-2014-2185 Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco BugId CSCun74374.

Cisco Unified Communications Manager CVE-2014-2185 Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Manager CVE-2014-2185 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Communications Manager CVE-2014-2185 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco TelePresence Homepage (Cisco)