CVE-2014-3317: Path Traversal

Published Jul 14, 2014

Updated

Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.

Affected Software

1 affected component

Cisco Unified Communications Manager=10.0\(1\)

Event History

Jul 14, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3317?

CVE-2014-3317 is considered a high severity vulnerability due to the potential for remote authenticated users to delete arbitrary files.

How do I fix CVE-2014-3317?

To fix CVE-2014-3317, it is recommended to upgrade to a version of Cisco Unified Communications Manager that addresses this vulnerability.

Who is affected by CVE-2014-3317?

CVE-2014-3317 affects users of Cisco Unified Communications Manager version 10.0(1).

What type of vulnerability is CVE-2014-3317?

CVE-2014-3317 is a directory traversal vulnerability that allows deletion of files through crafted URLs.

What causes the vulnerability in CVE-2014-3317?

The vulnerability in CVE-2014-3317 is caused by inadequate input validation in the Multiple Analyzer of the Dialed Number Analyzer component.