Directory traversal

2011-05-0322:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.3%

JSON

Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.

CPENameOperatorVersion
unified_communications_managereq6.13.97
unified_communications_managereq6.12.0
unified_communications_managereq6.13.0-bsu1
unified_communications_managereq6.12.0-su1-a
unified_communications_managereq6.14.0-su1
unified_communications_managereq6.14.0
unified_communications_managereq6.15.0-su1
unified_communications_managereq6.14.97
unified_communications_managereq6.13.0
unified_communications_managereq6.14.0-asu2

Name	Operator	Version
unified_communications_manager	eq	6.13.97
unified_communications_manager	eq	6.12.0
unified_communications_manager	eq	6.13.0-bsu1
unified_communications_manager	eq	6.12.0-su1-a
unified_communications_manager	eq	6.14.0-su1
unified_communications_manager	eq	6.14.0
unified_communications_manager	eq	6.15.0-su1
unified_communications_manager	eq	6.14.97
unified_communications_manager	eq	6.13.0
unified_communications_manager	eq	6.14.0-asu2