Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
                
            References
                    | Link | Resource | 
|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 | Vendor Advisory | 
| http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 | Vendor Advisory | 
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 | Vendor Advisory | 
| http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:59
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 - Vendor Advisory | |
| References | () http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 - Vendor Advisory | 
Information
                Published : 2013-11-18 03:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-6688
Mitre link : CVE-2013-6688
CVE.ORG link : CVE-2013-6688
JSON object : View
Products Affected
                cisco
- unified_communications_manager
CWE
                
                    
                        
                        CWE-22
                        
            Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
