CVE-2014-0732: Medium severity Cisco Unified Communications Manager vulnerability
The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0732?
CVE-2014-0732 has a CVSS score indicating a medium severity vulnerability.
How do I fix CVE-2014-0732?
To mitigate CVE-2014-0732, upgrade to a fixed version of Cisco Unified Communications Manager beyond 10.0(1).
What systems are affected by CVE-2014-0732?
CVE-2014-0732 affects Cisco Unified Communications Manager versions up to and including 10.0(1) and multiple earlier versions.
What type of vulnerability is CVE-2014-0732?
CVE-2014-0732 is classified as an authentication bypass vulnerability.
Can CVE-2014-0732 be exploited remotely?
Yes, CVE-2014-0732 allows remote attackers to read application files without proper authentication.