CVE-2011-1607
- State
- Published
- Severity
- Not scored
- Published
- May 3, 2011
- Updated
- Aug 6, 2024
- Reserved
- Apr 5, 2011
Description
Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- cisco-ucm-dir-traversal(67127)vdb-entry
- 44331third-party-advisory
- 20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerabilitymailing-list
- 1025449vdb-entry
- ADV-2011-1122vdb-entry
- 47608vdb-entry
- 20110427 Multiple Vulnerabilities in Cisco Unified Communications Managervendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.