CVE-2016-6364

Cisco Unified Communications Manager 11.5’s User Data Services (UDS) API contains an information-disclosure vulnerability that lets unauthenticated, remote attackers access confidential data via API calls that bypass access controls. Exploitation relies on improper authentication/authorization lo...