CVE-2013-5528

Опубликовано: 11 окт. 2013

Источник: nvd

CVSS2: 4

EPSS Средний

Описание

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

Ссылки

http://osvdb.org/98336
Broken Link
http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html
Exploit
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
Vendor Advisory
http://www.securityfocus.com/bid/62960
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/40887/
Exploit
Third Party Advisory
VDB Entry
http://osvdb.org/98336
Broken Link
http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html
Exploit
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
Vendor Advisory
http://www.securityfocus.com/bid/62960
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/40887/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.61502

Средний

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-jrxj-vh2x-2cc8

github

больше 3 лет назад