Directory traversal

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318...

CVE-2014-3318

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318...

CVE-2014-3318

Cisco Unified Communications Manager DNA path traversal (CVE-2014-3318) affects the DNA component via /dna/viewfilecontents.do. Root cause: insufficient input validation in the URL handling allows an authenticated remote attacker to read arbitrary files on the device. Impact: file disclosure with...