CVE-2011-3315
Summary
| CVE | CVE-2011-3315 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-10-27 21:55:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:C/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Unified Ccx | 6.0\(1\) | All | All | All |
| Application | Cisco | Unified Ccx | 7.0\(1\) | All | All | All |
| Application | Cisco | Unified Ccx | 7.0\(2\) | All | All | All |
| Application | Cisco | Unified Ccx | 8.0\(1\) | All | All | All |
| Application | Cisco | Unified Ccx | 8.0\(2\) | All | All | All |
| Application | Cisco | Unified Ccx | 8.5\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1.2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3d\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3e\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(1\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(1\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2c\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2\) | All | All | All |
| Hardware | Cisco | Unified Ip Interactive Voice Response | - | All | All | All |
| Application | Cisco | Unified Ip Ivr | 6.0\(1\) | All | All | All |
| Application | Cisco | Unified Ip Ivr | 7.0\(1\) | All | All | All |
| Application | Cisco | Unified Ip Ivr | 7.0\(2\) | All | All | All |
| Application | Cisco | Unified Ip Ivr | 8.0\(1\) | All | All | All |
| Application | Cisco | Unified Ip Ivr | 8.0\(2\) | All | All | All |
| Application | Cisco | Unified Ip Ivr | 8.5\(1\) | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Unified Contact Center Express Directory Traversal Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| Cisco Unified Communications Manager Directory Traversal Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.