CVE-2015-6352

Currently unrated

Key Information:

Vendor
Cisco
Status
Hosted Collaboration Solution
Vendor
CVE Published:
30 October 2015

Summary

Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.

References

http://www.securitytracker.com/id/1034022
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securityfocus.com/bid/77341
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.