CVEvulnerability
CVE-2013-5528
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
Affected configurations
• cisco unified communications manager
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/98336 Broken Link
- http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html Exploit, Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528 Vendor Advisory
- http://www.securityfocus.com/bid/62960 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40887/ Exploit, Third Party Advisory, VDB Entry
- http://osvdb.org/98336 Broken Link
- http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html Exploit, Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528 Vendor Advisory
- http://www.securityfocus.com/bid/62960 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/40887/ Exploit, Third Party Advisory, VDB Entry