N/A

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to retrieve sensitive information from the affected system. Cisco Bug IDs: CSCvf17644.

N/A

输入验证不恰当

Cisco Unified Communications Manager 信息泄露漏洞

Cisco Unified Communications Manager（CUCM，Unified CM，CallManager）是美国思科（Cisco）公司的一款统一通信系统中的呼叫处理组件。该组件提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。 CUCM中存在信息泄露漏洞，该漏洞源于程序没有正确的验证用户提交的查询输入。远程攻击者可通过发送恶意的请求利用该漏洞检索敏感信息。

N/A

N/A