CVE-2014-3319: Path Traversal

Published Jul 14, 2014

Updated

Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676.

Affected Software

1 affected component

Cisco Unified Communications Manager=10.0\(1\)

Event History

Jul 14, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3319?

CVE-2014-3319 is classified as a high-severity vulnerability due to its potential for unauthorized file access.

How do I fix CVE-2014-3319?

To fix CVE-2014-3319, it is recommended to apply the latest patches provided by Cisco for Unified Communications Manager version 10.0(1).

Who is affected by CVE-2014-3319?

CVE-2014-3319 affects remote authenticated users of Cisco Unified Communications Manager 10.0(1) who can exploit the vulnerability.

What type of vulnerability is CVE-2014-3319?

CVE-2014-3319 is a directory traversal vulnerability that allows unauthorized reading of files.

Can CVE-2014-3319 be exploited remotely?

Yes, CVE-2014-3319 can be exploited remotely by authenticated users through a specially crafted URL.