Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 | Vendor Advisory |
http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 | Vendor Advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 | Vendor Advisory |
http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:59
Type | Values Removed | Values Added |
---|---|---|
References | () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 - Vendor Advisory | |
References | () http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 - Vendor Advisory |
Information
Published : 2013-11-18 03:55
Updated : 2024-11-21 01:59
NVD link : CVE-2013-6688
Mitre link : CVE-2013-6688
CVE.ORG link : CVE-2013-6688
JSON object : View
Products Affected
cisco
- unified_communications_manager
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')