CVE-2014-7988

Severity CVSS v4.0:

Pending analysis

Type:

CWE-200 Information Leak / Disclosure

Publication date:

07/11/2014

Last modified:

12/04/2025

Description

The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493.

Impact

Vector 2.0

AV:N/AC:L/Au:S/C:P/I:N/A:N CVSS v2.0 Severity and Metrics:

Base Score: 4.00 MEDIUM
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): None
Availability (A): None

Base Score 2.0

4.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:cisco:unity_connection::::::::		10.5 (including)

To consult the complete list of CPE names with products and versions, see this page

References to Advisories, Solutions, and Tools

http://secunia.com/advisories/62106
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988
http://tools.cisco.com/security/center/viewAlert.x?alertId=36340
http://www.securitytracker.com/id/1031177
https://exchange.xforce.ibmcloud.com/vulnerabilities/98493
http://secunia.com/advisories/62106
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7988
http://tools.cisco.com/security/center/viewAlert.x?alertId=36340
http://www.securitytracker.com/id/1031177
https://exchange.xforce.ibmcloud.com/vulnerabilities/98493