VULNERABILITY INTELLIGENCE
CVE-2015-6352
CVSS score4.3 MEDIUM
EPSS probability1.82%
CISA KEVNot currently listed
Published2015-10-30
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor