Cisco Unified Communications Manager Real-Time Monitoring Tool Directory Traversal Vulnerability

Bugtraq ID:	68701
Class:	Input Validation Error
CVE:	CVE-2014-3319
Remote:	Yes
Local:	No
Published:	Jul 11 2014 12:00AM
Updated:	Jul 11 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unified Communications Manager 10.0(1)
Not Vulnerable:

Cisco Unified Communications Manager Real-Time Monitoring Tool Directory Traversal Vulnerability

Cisco Unified Communications Manager is prone to a directory-traversal vulnerability.

Exploiting this issue may allow an attacker to upload arbitrary files to arbitrary locations that could aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCup57676.

Cisco Unified Communications Manager Real-Time Monitoring Tool Directory Traversal Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco Unified Communications Manager Real-Time Monitoring Tool Directory Traversal Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager Real-Time Monitoring Tool Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Communications Manager Real-Time Monitoring Tool Path Traversal Vu (Cisco)
  
• Cisco Unified Communications Manager Real-Time Monitoring Tool Path Traversal Vu (Cisco)