CVE-2014-3318: Input Validation

Published Jul 10, 2014

Updated

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.

Affected Software

2 affected components

Cisco Unified Communications Manager

Cisco Unified Communications Manager=10.0\(1\)_base

Event History

Jul 10, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3318?

CVE-2014-3318 is considered a high-severity vulnerability due to its potential for unauthorized access to sensitive files.

How do I fix CVE-2014-3318?

To fix CVE-2014-3318, update Cisco Unified Communications Manager to the latest version available from Cisco.

Who is affected by CVE-2014-3318?

CVE-2014-3318 affects remote authenticated users of the Cisco Unified Communications Manager who can exploit the directory traversal vulnerability.

What type of vulnerability is CVE-2014-3318?

CVE-2014-3318 is a directory traversal vulnerability allowing unauthorized file access.

Can CVE-2014-3318 be exploited remotely?

Yes, CVE-2014-3318 can be exploited remotely by authenticated users through a crafted URL.