First published: Fri Jul 18 2014(Updated: )
Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IP Contact Center Enterprise |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-3323 has a medium severity rating due to the potential unauthorized access to sensitive files.
To resolve CVE-2014-3323, ensure you apply the latest security updates provided by Cisco for the Unified Contact Center Enterprise.
CVE-2014-3323 affects remote authenticated users of Cisco Unified Contact Center Enterprise systems.
CVE-2014-3323 allows attackers to perform directory traversal and read arbitrary files from the web root.
Yes, CVE-2014-3323 specifically affects Cisco Unified Contact Center Enterprise implementations.