Lucene search
HistoryJul 10, 2014 - 11:06 a.m.
CVE-2014-3318
cisco
unified communications
dna
vulnerability
cve-2014-3318
security
nvd
bug id cscup76318
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.
Affected configurations
Node
ciscounified_communications_manager
ORciscounified_communications_managerMatch10.0\(1\)_base
Related
cvelist
cvelist
CVE-2014-3318
2014-07-10 10:00:00
cisco
cisco
Cisco Unified Communications Manager DNA Path Traversal Vulnerability
2014-07-10 14:16:54
prion
prion
Directory traversal
2014-07-10 11:06:00
nvd
nvd
CVE-2014-3318
2014-07-10 11:06:28
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
Related for CVE-2014-3318