Directory traversal

2016-09-1210:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.6%

JSON

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.

CPENameOperatorVersion
hosted_collaboration_mediation_fulfillmenteq10.62.0-base
hosted_collaboration_mediation_fulfillmenteq10.63.0-base
hosted_collaboration_mediation_fulfillmenteq10.61.0-base

Name	Operator	Version
hosted_collaboration_mediation_fulfillment	eq	10.62.0-base
hosted_collaboration_mediation_fulfillment	eq	10.63.0-base
hosted_collaboration_mediation_fulfillment	eq	10.61.0-base