VULNERABILITY INTELLIGENCE

CVE-2014-0733

CVSS score5 MEDIUM
EPSS probability1.80%
CISA KEVNot currently listed
Published2014-02-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494.

Weakness classification

  • CWE-287: Improper Authentication

Primary references