Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
BID:63733
Info
Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
| Bugtraq ID: | 63733 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6688 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 13 2013 12:00AM |
| Updated: | Nov 13 2013 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Unified Communications Manager 9.1.2 Cisco Unified Communications Manager 9.1(1) Cisco Unified Communications Manager 9.1 |
| Not Vulnerable: | |
Discussion
Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
Cisco Unified Communications Manager is prone to a directory-traversal vulnerability.
Exploiting this issue may allow an attacker to upload arbitrary files to arbitrary locations that could aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCui58222.
Cisco Unified Communications Manager is prone to a directory-traversal vulnerability.
Exploiting this issue may allow an attacker to upload arbitrary files to arbitrary locations that could aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCui58222.
Exploit / POC
Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
Vendor indicate that proof-of-concept exploit code is available. This exploit is not otherwise publicly available or known to be circulating in the wild.
Vendor indicate that proof-of-concept exploit code is available. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified Communications Manager CVE-2013-6688 Directory Traversal Vulnerability
References:
References: