CVE-2014-8008

Medium

Description

Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.

SeverityMedium

CVSS6.8

Exploit probability—

Product

Cisco Unified Communications Manager

PublishedJan 22, 2015

First seenJan 22, 2015

How to fix

Vendor advisories

tools.cisco.com/security/center/viewAlert.x?alertId=37111

Affected products

Product	Affected versions	Fixed in
cisco unified_communications_manager	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.