CVE-2014-0731

Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier is affected by CVE-2014-0731, where the administration interface does not enforce authentication sufficiently, allowing remote attackers to bypass auth and read Java class files via a direct URL. This is the vulnerability descr...

Cisco Unified Communications Manager Java类文件信息泄漏漏洞

Bugtraq ID:65644 CVE ID:CVE-2014-0731 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager管理接口不正确执行正确的验证，允许远程攻击者利用漏洞访问UCM管理接口中特定的URL，未授权访问部分Java类文件。 0 Cisco Unified Communications Manager 10.01.10000.3 目前没有详细解决方案提供：...