CVE-2015-6352 Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco hosted collaboration solution | = 10.6_base | No fix listed |
| cisco unified communications domain manager | = 10.6_base | No fix listed |
References
- 20151028 Cisco Unified Communications Domain Manager URI Enumeration Vulnerability vendor-advisory
- 77341 vdb-entry
- 1034022 vdb-entry