VULNERABILITY INTELLIGENCE
CVE-2014-8008
CVSS score6.8 MEDIUM
EPSS probability8.44%
CISA KEVNot currently listed
Published2015-01-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:N/A:N
Description
Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor