CVEvulnerability

CVE-2009-2047

9.0 HIGH Published 2009-07-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-07-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.

Affected configurations

• cisco crs 3.5 • cisco crs 4.0 • cisco crs 4.1 • cisco crs 4.5 • cisco crs 5.0 • cisco crs 6.0 • cisco crs 7.0 • cisco customer response applications 3.5 • cisco ip qm 3.5 • cisco unified ccx 3.5 • cisco unified ccx 4.0\(1\) • cisco unified ccx 4.0\(3\) • cisco unified ccx 4.0\(4\) • cisco unified ccx 4.0\(5\) • cisco unified ccx 4.0\(5a\) • cisco unified ccx 4.5\(1\) • cisco unified ccx 4.5\(2\) • cisco unified ccx 5.0\(1\) • cisco unified ccx 6.0\(1\) • cisco unified ccx 7.0\(1\) • cisco unified ip contact center express 3.0 • cisco unified ip contact center express 5.0\(1\) • cisco unified ip contact center express 6.0\(1\) • cisco unified ip contact center express 7.0 • cisco unified ip ivr 3.0 • cisco unified ip ivr 3.1 • cisco unified ip ivr 4.0 • cisco unified ip ivr 4.1 • cisco unified ip ivr 4.5 • cisco unified ip ivr 5.0 • cisco unified ip ivr 6.0 • cisco unified ip ivr 7.0 • cisco unified ip ivr 7.0\(1\)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References