CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

CVE-2015-6352

Cisco Unified Communications Domain Manager (UCD) before version 10.6(1) is affected by an information-disclosure vulnerability where error messages for pathname access differ depending on whether the path exists. This enables remote attackers to map the filesystem by issuing a sequence of reques...