CVE-2014-0742: Input Validation
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0742?
CVE-2014-0742 is considered to have a moderate severity level due to its potential impact on file access control.
How do I fix CVE-2014-0742?
To mitigate CVE-2014-0742, upgrade to a version of Cisco Unified Communications Manager that is later than 10.0(1).
Who is affected by CVE-2014-0742?
CVE-2014-0742 affects local users of Cisco Unified Communications Manager versions 10.0(1) and earlier.
What kind of access does CVE-2014-0742 allow?
CVE-2014-0742 allows local users to read or modify arbitrary files in the Cisco Unified Communications Manager.
What is the impact of CVE-2014-0742 on system security?
CVE-2014-0742 can lead to unauthorized access to sensitive files, compromising the security and integrity of the system.