CVE-2018-0135: Input Validation

Published Feb 8, 2018

Updated

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to retrieve sensitive information from the affected system. Cisco Bug IDs: CSCvf17644.

Affected Software

1 affected component

Cisco Unified Communications Manager=11.0\(1.24075.1\)

Event History

Feb 8, 2018

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0135?

CVE-2018-0135 is classified as a high severity vulnerability due to its potential for unauthorized information access.

How do I fix CVE-2018-0135?

To mitigate CVE-2018-0135, upgrade to a fixed version of Cisco Unified Communications Manager that addresses the vulnerability.

What type of attacks can exploit CVE-2018-0135?

CVE-2018-0135 can be exploited through authenticated, remote access, allowing attackers to manipulate user-supplied input.

What are the risks of not addressing CVE-2018-0135?

Failing to address CVE-2018-0135 may lead to unauthorized disclosure of sensitive information and potential data breaches.

Which version of Cisco Unified Communications Manager is affected by CVE-2018-0135?

CVE-2018-0135 specifically affects Cisco Unified Communications Manager version 11.0(1.24075.1).