NetSight
IP …
high7.8Public exploit code

CVE-2011-3315

Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), an…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.

Affected products

VendorProductAffected versions
CiscoUnified Ip Interactive Voice Response
All versions
CiscoUnified Ip Ivr
Versions 6.0\(1\), 7.0\(1\), 7.0\(2\), 8.0\(1\), 8.0\(2\), 8.5\(1\)
CiscoUnified Communications Manager
Versions 5.0, 5.1, 5.1\(1\), 5.1\(1b\), 5.1\(1c\), 5.1\(2\)

Weakness classification

CWE-22

References