NetSight
medium6.9

CVE-2013-6689

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files…

Impact

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Affected products

VendorProductAffected versions
CiscoUnified Communications Manager
through 9.1\(1\)
Versions 3.3\(5\), 3.3\(5\)sr1, 3.3\(5\)sr2a, 4.1\(3\), 4.1\(3\)sr1

Weakness classification

References