CVEvulnerability
CVE-2009-2047
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.
Affected configurations
• cisco crs 3.5
• cisco crs 4.0
• cisco crs 4.1
• cisco crs 4.5
• cisco crs 5.0
• cisco crs 6.0
• cisco crs 7.0
• cisco customer response applications 3.5
• cisco ip qm 3.5
• cisco unified ccx 3.5
• cisco unified ccx 4.0\(1\)
• cisco unified ccx 4.0\(3\)
• cisco unified ccx 4.0\(4\)
• cisco unified ccx 4.0\(5\)
• cisco unified ccx 4.0\(5a\)
• cisco unified ccx 4.5\(1\)
• cisco unified ccx 4.5\(2\)
• cisco unified ccx 5.0\(1\)
• cisco unified ccx 6.0\(1\)
• cisco unified ccx 7.0\(1\)
• cisco unified ip contact center express 3.0
• cisco unified ip contact center express 5.0\(1\)
• cisco unified ip contact center express 6.0\(1\)
• cisco unified ip contact center express 7.0
• cisco unified ip ivr 3.0
• cisco unified ip ivr 3.1
• cisco unified ip ivr 4.0
• cisco unified ip ivr 4.1
• cisco unified ip ivr 4.5
• cisco unified ip ivr 5.0
• cisco unified ip ivr 6.0
• cisco unified ip ivr 7.0
• cisco unified ip ivr 7.0\(1\)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/55936 osvdb.org
- http://secunia.com/advisories/35861 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35706 Patch
- http://www.securitytracker.com/id?1022569 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1913 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51731 exchange.xforce.ibmcloud.com
- http://osvdb.org/55936 osvdb.org
- http://secunia.com/advisories/35861 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35706 Patch
- http://www.securitytracker.com/id?1022569 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1913 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51731 exchange.xforce.ibmcloud.com