Cisco Unified Communications Manager CVE-2015-0680 Information Disclosure Vulnerability

Bugtraq ID:	73393
Class:	Design Error
CVE:	CVE-2015-0680
Remote:	Yes
Local:	No
Published:	Mar 27 2015 12:00AM
Updated:	Mar 27 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Cisco Unified Communications Manager 9.1(2.10000.28) Base
Not Vulnerable:

Cisco Unified Communications Manager CVE-2015-0680 Information Disclosure Vulnerability

Cisco Unified Communications Manager is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco BugId CSCuq44439.

Cisco Unified Communications Manager CVE-2015-0680 Information Disclosure Vulnerability

Attackers can use readily available network tools to exploit this issue.

Cisco Unified Communications Manager CVE-2015-0680 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager CVE-2015-0680 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Communications Manager Homepage (Cisco)
  
• Cisco Unified Call Manager Arbitrary File Retrieval Vulnerability (Cisco)