CVE-2017-6758
MEDIUMCisco Unified Communications Manager 11.5(1.10000.6 - Path Traversal
Title source: llmDescription
A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100119
Vendor Advisory x_refsource_confirm
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1
Vendor Advisory x_refsource_confirm
https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1039064
Scores
CVSS v3
6.5
EPSS
0.0375
EPSS Percentile
88.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-22
Status
published
Products (2)
cisco/unified_communications_manager
11.5\(1.10000.6\)
n/a/Cisco Unified Communications Manager
Cisco Unified Communications Manager
Published
Aug 07, 2017
Tracked Since
Feb 18, 2026