CVE-2014-8008

CVE-2014-8008 affects Cisco Unified Communications Manager (CUCM) RTMT API. The API fails to properly restrict paths passed to a command, enabling an authenticated remote attacker to read arbitrary files via a full pathname. The issue is a file-disclosure/path-traversal vulnerability within the R...