Cisco Unified Communications Manager CVE-2014-8008 File Disclosure Vulnerability

Bugtraq ID:	72263
Class:	Input Validation Error
CVE:	CVE-2014-8008
Remote:	Yes
Local:	No
Published:	Jan 21 2015 12:00AM
Updated:	Mar 08 2015 04:01PM
Credit:	Cisco
Vulnerable:	Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5
Not Vulnerable:

Cisco Unified Communications Manager CVE-2014-8008 File Disclosure Vulnerability

Cisco Unified Communications Manager is prone to a file-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to gain access to sensitive information stored in arbitrary files, that may aid in further attacks.

This issue is being tracked by Cisco Bug Id CSCur49414.

Cisco Unified Communications Manager CVE-2014-8008 File Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Manager CVE-2014-8008 File Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2014-8008 File Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco TelePresence Homepage (Cisco)