|
Description
|
|
A vulnerability has been reported in Cisco Enterprise Content Delivery System (ECDS), which can be exploited by malicious people to disclose sensitive information.
Certain unspecified input is not properly verified before being used to read files. This can be exploited to disclose the contents of arbitrary local files via directory traversal sequences.
The vulnerability is reported in version 2.6.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable OS:
Cisco Enterprise Content Delivery System (ECDS) 2.xVulnerable Software:
|
|
|
|
|
|
Solution
|
|
No official solution is currently available.
|
|
|
|
|
|
CVE
|
|
CVE-2014-8019
|
|
|
|
|
|
References
|
|
Cisco (CSCuo90148):
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8019
https://tools.cisco.com/bugsearch/bug/CSCuo90148
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
