QwikSec

Security Database

CVE

CWE

Training

CVE-2014-0733

Published: Feb 20, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20140218 Cisco Unified Communications Manager Enterprise License Manager Information Disclosure Vulnerability

vendor-advisory

x_refsource_CISCO

http://tools.cisco.com/security/center/viewAlert.x?alertId=32914

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.