CVE-2011-1607 — Path Traversal in Cisco Unified Communications Manager

CWE-22 — Path Traversal3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.6%

top 29.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Unified Communications Manager

Timeline

PublishedMay 3

Latest updateMay 17

Description

Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

▶NVDcisco/unified_communications_manager45 versions+44

🔴Vulnerability Details

GHSA

GHSA-29f9-3r2g-rwg5: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6↗2022-05-17

▶

CVEList

CVE-2011-1607: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6↗2011-05-03

▶