Vulnerability Details CVE-2015-6352
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-ucd
- http://www.securityfocus.com/bid/77341
- http://www.securitytracker.com/id/1034022
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-ucd
- http://www.securityfocus.com/bid/77341
- http://www.securitytracker.com/id/1034022
Products affected by CVE-2015-6352
-
cpe:2.3:a:cisco:hosted_collaboration_solution:10.6_base
-
cpe:2.3:a:cisco:unified_communications_domain_manager:10.6_base