CVE-2013-5528

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

Affected products

Cisco Unified Communications Manager, Apache Tomcat

Cisco Unified Communications Manager

All versions

CVSS 2.0

4.0 MEDIUM

EPSS

23.3% (98th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2013-10-11