Information disclosure in Cisco Unified Communications Manager

CVE-2013-3442

The web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854.

Vulnerability class: Information Disclosure

EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)