CVE-2015-6352

published 2015-10-30

CVE-2015-6352: Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname…

medium 4.3 CVSS 3.1

AV N AC M Au N C P I N A N

Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	hosted_collaboration_solution	—	—
cisco	unified_communications_domain_manager	—	—
cisco	unified_communications_domain_manager_uri_enumeration	—	—

CWE-200