CVEvulnerability

CVE-2013-6689

6.9 MEDIUM Published 2013-11-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-11-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Affected configurations

• cisco unified communications manager (<= 9.1\(1\)) • cisco unified communications manager 3.3\(5\) • cisco unified communications manager 3.3\(5\)sr1 • cisco unified communications manager 3.3\(5\)sr2a • cisco unified communications manager 4.1\(3\) • cisco unified communications manager 4.1\(3\)sr1 • cisco unified communications manager 4.1\(3\)sr2 • cisco unified communications manager 4.1\(3\)sr3 • cisco unified communications manager 4.1\(3\)sr4 • cisco unified communications manager 4.2 • cisco unified communications manager 4.2.1 • cisco unified communications manager 4.2.2 • cisco unified communications manager 4.2.3 • cisco unified communications manager 4.2.3sr1 • cisco unified communications manager 4.2.3sr2 • cisco unified communications manager 4.2.3sr2b • cisco unified communications manager 4.3 • cisco unified communications manager 4.3\(1\) • cisco unified communications manager 5.0 • cisco unified communications manager 5.1 • cisco unified communications manager 5.1\(1\) • cisco unified communications manager 5.1\(1b\) • cisco unified communications manager 5.1\(1c\) • cisco unified communications manager 5.1\(2\) • cisco unified communications manager 5.1\(2a\) • cisco unified communications manager 5.1\(2b\) • cisco unified communications manager 5.1\(3\) • cisco unified communications manager 5.1\(3a\) • cisco unified communications manager 5.1\(3c\) • cisco unified communications manager 5.1\(3d\) • cisco unified communications manager 5.1\(3e\) • cisco unified communications manager 5.1.2 • cisco unified communications manager 6.0 • cisco unified communications manager 6.0\(1\) • cisco unified communications manager 6.0\(1a\) • cisco unified communications manager 6.0\(1b\) • cisco unified communications manager 6.1\(1\) • cisco unified communications manager 6.1\(1a\) • cisco unified communications manager 6.1\(1b\) • cisco unified communications manager 6.1\(2\) • cisco unified communications manager 6.1\(2\)su1 • cisco unified communications manager 6.1\(2\)su1a • cisco unified communications manager 6.1\(3\) • cisco unified communications manager 6.1\(3a\) • cisco unified communications manager 6.1\(3b\) • cisco unified communications manager 6.1\(3b\)su1 • cisco unified communications manager 6.1\(4\) • cisco unified communications manager 6.1\(4\)su1 • cisco unified communications manager 6.1\(4a\) • cisco unified communications manager 6.1\(4a\)su2 • cisco unified communications manager 6.1\(5\) • cisco unified communications manager 6.1\(5\)su1 • cisco unified communications manager 6.1\(5\)su2 • cisco unified communications manager 6.1\(5\)su3 • cisco unified communications manager 7.0\(1\)su1 • cisco unified communications manager 7.0\(1\)su1a • cisco unified communications manager 7.0\(2\) • cisco unified communications manager 7.0\(2a\) • cisco unified communications manager 7.0\(2a\)su1 • cisco unified communications manager 7.0\(2a\)su2 … and 53 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References