Cisco Unified Communications Manager CVE-2014-2184 Information Disclosure Vulnerability

Bugtraq ID:	67101
Class:	Input Validation Error
CVE:	CVE-2014-2184
Remote:	Yes
Local:	No
Published:	Apr 28 2014 12:00AM
Updated:	May 02 2014 12:50AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Communications Manager CVE-2014-2184 Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco BugId CSCun74352.

Cisco Unified Communications Manager CVE-2014-2184 Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Manager CVE-2014-2184 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Communications Manager CVE-2014-2184 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco TelePresence Homepage (Cisco)