CVE-2015-0717

Cisco Unified Communications Manager 10.0(1.10000.12) contains a local privilege-escalation vulnerability (CVE-2015-0717) where an authenticated, local attacker can gain root privileges by injecting shell commands via an unsafely handled parameter. Root cause: failure to sanitize user input, enab...