CVE-2015-0680

https://notcve.org/view.php?id=CVE-2015-0680

Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439. Cisco Unified Call Manager (CM) 9.1(2.1000.28) no restringe correctamente las solicitudes de recursos, lo que permite a usuarios remotos autenticados leer ficheros arbitrarios a través de vectores no especificados, también conocido como Bug ID CSCuq44439. • http://tools.cisco.com/security/center/viewAlert.x?alertId=38079 http://www.securitytracker.com/id/1031991 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •