CVEvulnerability
CVE-2013-6688
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.3 MEDIUM — AV:N/AC:M/Au:S/C:N/I:C/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
Affected configurations
• cisco unified communications manager (<= 9.1\(1\))
• cisco unified communications manager 3.3\(5\)
• cisco unified communications manager 3.3\(5\)sr1
• cisco unified communications manager 3.3\(5\)sr2a
• cisco unified communications manager 4.1\(3\)
• cisco unified communications manager 4.1\(3\)sr1
• cisco unified communications manager 4.1\(3\)sr2
• cisco unified communications manager 4.1\(3\)sr3
• cisco unified communications manager 4.1\(3\)sr4
• cisco unified communications manager 4.2
• cisco unified communications manager 4.2.1
• cisco unified communications manager 4.2.2
• cisco unified communications manager 4.2.3
• cisco unified communications manager 4.2.3sr1
• cisco unified communications manager 4.2.3sr2
• cisco unified communications manager 4.2.3sr2b
• cisco unified communications manager 4.3
• cisco unified communications manager 4.3\(1\)
• cisco unified communications manager 5.0
• cisco unified communications manager 5.1
• cisco unified communications manager 5.1\(1\)
• cisco unified communications manager 5.1\(1b\)
• cisco unified communications manager 5.1\(1c\)
• cisco unified communications manager 5.1\(2\)
• cisco unified communications manager 5.1\(2a\)
• cisco unified communications manager 5.1\(2b\)
• cisco unified communications manager 5.1\(3\)
• cisco unified communications manager 5.1\(3a\)
• cisco unified communications manager 5.1\(3c\)
• cisco unified communications manager 5.1\(3d\)
• cisco unified communications manager 5.1\(3e\)
• cisco unified communications manager 5.1.2
• cisco unified communications manager 6.0
• cisco unified communications manager 6.0\(1\)
• cisco unified communications manager 6.0\(1a\)
• cisco unified communications manager 6.0\(1b\)
• cisco unified communications manager 6.1\(1\)
• cisco unified communications manager 6.1\(1a\)
• cisco unified communications manager 6.1\(1b\)
• cisco unified communications manager 6.1\(2\)
• cisco unified communications manager 6.1\(2\)su1
• cisco unified communications manager 6.1\(2\)su1a
• cisco unified communications manager 6.1\(3\)
• cisco unified communications manager 6.1\(3a\)
• cisco unified communications manager 6.1\(3b\)
• cisco unified communications manager 6.1\(3b\)su1
• cisco unified communications manager 6.1\(4\)
• cisco unified communications manager 6.1\(4\)su1
• cisco unified communications manager 6.1\(4a\)
• cisco unified communications manager 6.1\(4a\)su2
• cisco unified communications manager 6.1\(5\)
• cisco unified communications manager 6.1\(5\)su1
• cisco unified communications manager 6.1\(5\)su2
• cisco unified communications manager 6.1\(5\)su3
• cisco unified communications manager 7.0\(1\)su1
• cisco unified communications manager 7.0\(1\)su1a
• cisco unified communications manager 7.0\(2\)
• cisco unified communications manager 7.0\(2a\)
• cisco unified communications manager 7.0\(2a\)su1
• cisco unified communications manager 7.0\(2a\)su2
… and 53 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 Vendor Advisory