CVE-2015-0680
Cisco Unified Call Manager 9.1(2.1000.28) - Authenticated Arbitrary File Read
Title source: llmDescription
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38079
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031991
Scores
EPSS
0.0133
EPSS Percentile
67.6%
Details
CWE
CWE-200
Status
published
Products (1)
cisco/unified_callmanager
9.1\(2.1000.28\)
Published
Mar 28, 2015
Tracked Since
Feb 18, 2026