CVE-2014-0686

Cisco Unified Communications Manager aka Unified CM 9.1 2.10000.28 and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908...

CVE-2014-0686

Cisco Unified Communications Manager (Unified CM) 9.1 (2.10000.28) and earlier is affected by a local privilege-escalation vulnerability due to incorrect file permissions on underlying OS-level commands. An authenticated, local attacker could manipulate specific commands to gain elevated privileg...