Cisco Unified Communications Manager ELM信息泄漏漏洞

Bugtraq ID:65643 CVE ID:CVE-2014-0733 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 访问某些相关ELM的URL时Cisco Unified Communications Manager应用对其缺少正确的验证，允许远程攻击者利用漏洞获取受限文件敏感内容信息。 0 Cisco Unified Communications Manager 10.01.10000.3 厂商补丁： Cisco ----- Cisco Unified Communications Manager...

CVE-2014-0733

The vulnerability CVE-2014-0733 affects Cisco Unified Communications Manager’s Enterprise License Manager (ELM). The ELM component in Unified CM 10.0(1) and earlier does not properly enforce authentication, allowing remote attackers to read ELM files by directly requesting a URL. The issue is an ...