Arbitrary File Read Vulnerability in Cisco Unified Call Manager (CM) 9.1(2.1000.28)

CVE-2015-0680 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.

Learn more about our User Device Pen Test.