Path traversal

Absolute path traversal vulnerability in the Real-Time Monitoring Tool RTMT API in Cisco Unified Communications Manager CUCM allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414...

CVE-2014-8008

CVE-2014-8008 affects Cisco Unified Communications Manager (CUCM) RTMT API. The API fails to properly restrict paths passed to a command, enabling an authenticated remote attacker to read arbitrary files via a full pathname. The issue is a file-disclosure/path-traversal vulnerability within the R...