5 matches found
CVE-2014-3317: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager 10.01 allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314...
PT-2014-5211
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.01 Description A directory traversal issue in the Multiple Analyzer component of the Dialed Number Analyzer DNA allows remote authenticated users to delete arbitrary files by using a crafted URL...
Design/Logic Flaw
The Multiple Analyzer in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297...
PT-2014-5210
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue allows remote authenticated users to bypass intended upload restrictions via a crafted parameter in the Multiple Analyzer component of the Dialed Number...
CVE-2014-3316: Improper Input Validation
The Multiple Analyzer in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297...