← Back

CVE-2014-0731

nvd nist
Published: Feb 22, 2014Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.

Affected (18)

Cisco
1 product
Unified Communications Manager
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Unified Communications Manager
Up to 10.0\(1\)
Unified Communications Manager
Version 10.0
Unified Communications Manager
Version 3.3(5)
Unified Communications Manager
Version 3.3(5)sr1
Unified Communications Manager
Version 3.3(5)sr2a
Unified Communications Manager
Version 4.1(3)
Unified Communications Manager
Version 4.1(3)sr1
Unified Communications Manager
Version 4.1(3)sr2
Unified Communications Manager
Version 4.1(3)sr3
Unified Communications Manager
Version 4.1(3)sr4
Unified Communications Manager
Version 4.2.1
Unified Communications Manager
Version 4.2.2
Unified Communications Manager
Version 4.2.3
Unified Communications Manager
Version 4.2.3sr1
Unified Communications Manager
Version 4.2.3sr2
Unified Communications Manager
Version 4.2.3sr2b
Unified Communications Manager
Version 4.2
Unified Communications Manager
Version 4.3

Related CWEs

CWE-264
CWE-264

References (4)

Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.