Cisco Unified Communications Manager Multiple Arbitrary File Manipulation Vulnerabilities (CSCuo17199 / CSCuo17302)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by multiple file manipulation vulnerabilities in the Real-Time Monitoring Tool RTMT due to improper validation of user-supplied input. An authenticated, remote attacker can exploit thes...

CVE-2014-3319

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

Cisco Unified Communications Manager Real-Time Monitoring Tool Multiple Vulnerabilities

A vulnerability in the Real-Time Monitoring Tool RTMT of Cisco Unified Communications Manager could allow an authenticated, remote attacker to download or delete files from arbitrary locations on the filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit...

CVE-2014-3292

The Real Time Monitoring Tool RTMT implementation in Cisco Unified Communications Manager Unified CM allows remote authenticated users to 1 read or 2 delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199...

CVE-2014-3292

The vulnerability CVE-2014-3292 affects Cisco Unified Communications Manager (CUCM) RTMT, where insufficient input validation in RTMT allows an authenticated, remote attacker to read or delete arbitrary files via crafted HTTP requests. Affected component: Real-Time Monitoring Tool (RTMT) within C...

Cisco Unified Communications Manager RTMT信息泄漏漏洞

Bugtraq ID:65642 CVE ID:CVE-2014-0732 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 访问某些RTMT WEB应用资源时Cisco Unified Communications Manager应用对其缺少正确的验证，允许远程攻击者利用漏洞获取受限文件敏感内容信息。 0 Cisco Unified Communications Manager 10.01.10000.3 厂商补丁： Cisco ----- Cisco Unified Communications Manage...

CVE-2014-0732

The CVE-2014-0732 issue affects Cisco Unified Communications Manager (Cisco Unified CM) RTMT web application (versions 10.0(1) and earlier). The root cause is insufficient authentication enforcement, permitting unauthenticated remote attackers to read RTMT files via a direct URL. Impact is inform...