CVE-2014-3317

published 2014-07-14

CVE-2014-3317: Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows…

medium 5.5 CVSS 3.1

AV N AC L Au S C N I P A P

Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	unified_communications_manager	—	—
linux	linux_kernel	>= 5.6.0 < 6.1.160	6.1.160
linux	linux_kernel	>= 6.13.0 < 6.18.3	6.18.3
linux	linux_kernel	>= 6.2.0 < 6.6.120	6.6.120
linux	linux_kernel	>= 6.7.0 < 6.12.64	6.12.64

CWE-22