CVEvulnerability
CVE-2014-0686
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:L/AC:H/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.
Affected configurations
• cisco unified communications manager (<= 9.1\(2.10000.28\))
• cisco unified communications manager 9.1\(1\)
• cisco unified communications manager 9.1\(2\)
Related
Weakness · not in database (1)
References
- http://osvdb.org/102750 osvdb.org
- http://secunia.com/advisories/56818 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32683 Vendor Advisory
- http://www.securityfocus.com/bid/65281 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90852 exchange.xforce.ibmcloud.com
- http://osvdb.org/102750 osvdb.org
- http://secunia.com/advisories/56818 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32683 Vendor Advisory
- http://www.securityfocus.com/bid/65281 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90852 exchange.xforce.ibmcloud.com