CVE-2022-20791: A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management…

PriorityP343medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

1.43%

70.0th percentile

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. This vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the API to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device. The attacker would need valid user credentials to exploit this vulnerability.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_unified_communications_manager	—	—
cisco	unified_communications_manager	<= 11.5\(1.10000.6\)	—
cisco	unified_communications_manager	12.5 – 12.5\(1.10000.22\)	—
cisco	unified_communications_manager	14.0 – 14.0\(1.10000.20\)	—
cisco	unified_communications_manager_im_and_presence_service	<= 12.5\(1\)	—
cisco	unified_communications_manager_im_and_presence_service	>= 14.0 < 14su2	14su2
cisco	unified_communications_products	—	—

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

vendor_cisco6.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.