CVE-2014-3333
First published: Mon Aug 11 2014(Updated: )
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unity Connection | =9.1\(1\) | |
| Cisco Unity Connection | =9.1\(2\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/59768
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35200
- http://www.securityfocus.com/bid/69074
- http://www.securitytracker.com/id/1030688
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95135
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco unity connection
- version/cisco unity connection/9.1\(1\)
- version/cisco unity connection/9.1\(2\)