Information disclosure in Cisco Unified Communications Manager

CVE-2014-2185

The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.

Vulnerability class: Information Disclosure

EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)