Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
| Software | From | Fixed in |
|---|---|---|
| cisco / unified_callmanager | 9.1(2.1000.28) | 9.1(2.1000.28).x |