The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770.Referenceshttp://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1240