CVEvulnerability

CVE-2013-1224

7.8 HIGH Published 2013-05-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.

Affected configurations

• cisco unified customer voice portal (<= 9.0\(1\)) • cisco unified customer voice portal 3.0 • cisco unified customer voice portal 3.6\(10\) • cisco unified customer voice portal 4.0 • cisco unified customer voice portal 4.0\(2\) • cisco unified customer voice portal 4.1 • cisco unified customer voice portal 7.0 • cisco unified customer voice portal 7.0\(2\) • cisco unified customer voice portal 8.0\(1\) • cisco unified customer voice portal 8.5\(1\) • cisco unified customer voice portal 9.0

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References