SecuritySpace - CVE-2017-6758

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-6758

Description: A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.

Test IDs: 1.3.6.1.4.1.25623.1.0.140276

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-6758
BugTraq ID: 100119
http://www.securityfocus.com/bid/100119
http://www.securitytracker.com/id/1039064

CVE ID:	CVE-2017-6758
Description:	A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.
Test IDs:	1.3.6.1.4.1.25623.1.0.140276
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6758 BugTraq ID: 100119 http://www.securityfocus.com/bid/100119 http://www.securitytracker.com/id/1039064