Vulnerability in Cisco Unified Communications Manager
CVE-2014-0741
The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_communications_manager — versions 3.3\(5\), 3.3\(5\)sr1, 3.3\(5\)sr2a
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)