CVE-2014-2185: Infoleak
The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2185?
CVE-2014-2185 is classified as a medium severity vulnerability.
How do I fix CVE-2014-2185?
To fix CVE-2014-2185, Cisco recommends applying the appropriate software update for the affected version of Unified Communications Manager.
Who is affected by CVE-2014-2185?
Remote authenticated users of Cisco Unified Communications Manager are potentially affected by CVE-2014-2185.
What type of information can be exposed by CVE-2014-2185?
CVE-2014-2185 can expose sensitive information through extraneous fields in an HTML document.
Is CVE-2014-2185 a remote or local vulnerability?
CVE-2014-2185 is considered a remote vulnerability, as it can be exploited by authenticated users from a remote location.