CVE-2017-6629

The CVE-2017-6629 entry concerns Cisco Unity Connection 10.5(2). Affected component: ImageID parameter handling in HTTP POST submissions. Root cause: improper sanitization of filenames in user-supplied input, enabling directory traversal. Impact: an unauthenticated, remote attacker could access f...