Vulnerability Description
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 10.0\(1\) |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/59727
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34898Vendor Advisory
- http://www.securityfocus.com/bid/68481
- http://www.securitytracker.com/id/1030554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94435
- http://secunia.com/advisories/59727
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3317Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34898Vendor Advisory
- http://www.securityfocus.com/bid/68481
- http://www.securitytracker.com/id/1030554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94435
FAQ
What is CVE-2014-3317?
CVE-2014-3317 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arb...
How severe is CVE-2014-3317?
CVE-2014-3317 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3317?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.