CVE-2014-0724: Improper Input Validation

The bulk administration interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340...

PT-2014-3788

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager UCM versions 10.01 and earlier Description The bulk administration interface in Cisco Unified Communications Manager allows remote attackers to bypass authentication and read arbitrary files. Recommendation...

Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the bulk administration interface of Cisco Unified Communications Manager UCM could allow an authenticated, remote attacker to read arbitrary files from the underlying file system. The vulnerability is due to insufficient input validation. An attacker could exploit this...