Cisco Unified Communications Manager CVE-2015-0717 Local Privilege Escalation Vulnerability

Bugtraq ID:	74579
Class:	Design Error
CVE:	CVE-2015-0717
Remote:	No
Local:	Yes
Published:	May 08 2015 12:00AM
Updated:	May 08 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unified Communications Manager 10.0 (1.10000.12)
Not Vulnerable:

Cisco Unified Communications Manager CVE-2015-0717 Local Privilege Escalation Vulnerability

Cisco Unified Communications Manager is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain root privileges. Successful exploits will result in the complete compromise of affected computers.

This issue is being tracked by Cisco Bug ID CSCut19546.

Cisco Unified Communications Manager CVE-2015-0717 Local Privilege Escalation Vulnerability

Attackers can use standard commands to exploit this issue.

Cisco Unified Communications Manager CVE-2015-0717 Local Privilege Escalation Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Communications Manager Homepage (Cisco)
  
• Cisco Unified Communications Manager root Shell Access Local Privilege Escalatio (Cisco)