Lucene search
CiscoCVE-2013-6688HistoryNov 18, 2013 - 3:55 a.m.
CVE-2013-6688
2013-11-1803:55:06
CWE-22
cisco
web.nvd.nist.gov
37
cve
2013
6688
directory traversal
vulnerability
cisco
unified communications manager
elm
enterprise license manager
bug id
cscui58222
nvd
CVSS2
6.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:C/A:N
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
46.7%
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222.
Affected configurations
Node
ciscounified_communications_managerRange≤9.1\(1\)
ORciscounified_communications_managerMatch3.3\(5\)
ORciscounified_communications_managerMatch3.3\(5\)sr1
ORciscounified_communications_managerMatch3.3\(5\)sr2a
ORciscounified_communications_managerMatch4.1\(3\)
ORciscounified_communications_managerMatch4.1\(3\)sr1
ORciscounified_communications_managerMatch4.1\(3\)sr2
ORciscounified_communications_managerMatch4.1\(3\)sr3
ORciscounified_communications_managerMatch4.1\(3\)sr4
ORciscounified_communications_managerMatch4.2
ORciscounified_communications_managerMatch4.2.1
ORciscounified_communications_managerMatch4.2.2
ORciscounified_communications_managerMatch4.2.3
ORciscounified_communications_managerMatch4.2.3sr1
ORciscounified_communications_managerMatch4.2.3sr2
ORciscounified_communications_managerMatch4.2.3sr2b
ORciscounified_communications_managerMatch4.3
ORciscounified_communications_managerMatch4.3\(1\)
ORciscounified_communications_managerMatch5.0
ORciscounified_communications_managerMatch5.1
ORciscounified_communications_managerMatch5.1\(1\)
ORciscounified_communications_managerMatch5.1\(1b\)
ORciscounified_communications_managerMatch5.1\(1c\)
ORciscounified_communications_managerMatch5.1\(2\)
ORciscounified_communications_managerMatch5.1\(2a\)
ORciscounified_communications_managerMatch5.1\(2b\)
ORciscounified_communications_managerMatch5.1\(3\)
ORciscounified_communications_managerMatch5.1\(3a\)
ORciscounified_communications_managerMatch5.1\(3c\)
ORciscounified_communications_managerMatch5.1\(3d\)
ORciscounified_communications_managerMatch5.1\(3e\)
ORciscounified_communications_managerMatch5.1.2
ORciscounified_communications_managerMatch6.0
ORciscounified_communications_managerMatch6.0\(1\)
ORciscounified_communications_managerMatch6.0\(1a\)
ORciscounified_communications_managerMatch6.0\(1b\)
ORciscounified_communications_managerMatch6.1\(1\)
ORciscounified_communications_managerMatch6.1\(1a\)
ORciscounified_communications_managerMatch6.1\(1b\)
ORciscounified_communications_managerMatch6.1\(2\)
ORciscounified_communications_managerMatch6.1\(2\)su1
ORciscounified_communications_managerMatch6.1\(2\)su1a
ORciscounified_communications_managerMatch6.1\(3\)
ORciscounified_communications_managerMatch6.1\(3a\)
ORciscounified_communications_managerMatch6.1\(3b\)
ORciscounified_communications_managerMatch6.1\(3b\)su1
ORciscounified_communications_managerMatch6.1\(4\)
ORciscounified_communications_managerMatch6.1\(4\)su1
ORciscounified_communications_managerMatch6.1\(4a\)
ORciscounified_communications_managerMatch6.1\(4a\)su2
ORciscounified_communications_managerMatch6.1\(5\)
ORciscounified_communications_managerMatch6.1\(5\)su1
ORciscounified_communications_managerMatch6.1\(5\)su2
ORciscounified_communications_managerMatch6.1\(5\)su3
ORciscounified_communications_managerMatch7.0\(1\)su1
ORciscounified_communications_managerMatch7.0\(1\)su1a
ORciscounified_communications_managerMatch7.0\(2\)
ORciscounified_communications_managerMatch7.0\(2a\)
ORciscounified_communications_managerMatch7.0\(2a\)su1
ORciscounified_communications_managerMatch7.0\(2a\)su2
ORciscounified_communications_managerMatch7.1\(2a\)
ORciscounified_communications_managerMatch7.1\(2a\)su1
ORciscounified_communications_managerMatch7.1\(2b\)
ORciscounified_communications_managerMatch7.1\(2b\)su1
ORciscounified_communications_managerMatch7.1\(3\)
ORciscounified_communications_managerMatch7.1\(3a\)
ORciscounified_communications_managerMatch7.1\(3a\)su1
ORciscounified_communications_managerMatch7.1\(3a\)su1a
ORciscounified_communications_managerMatch7.1\(3b\)
ORciscounified_communications_managerMatch7.1\(3b\)su1
ORciscounified_communications_managerMatch7.1\(3b\)su2
ORciscounified_communications_managerMatch7.1\(5\)
ORciscounified_communications_managerMatch7.1\(5\)su1
ORciscounified_communications_managerMatch7.1\(5\)su1a
ORciscounified_communications_managerMatch7.1\(5a\)
ORciscounified_communications_managerMatch7.1\(5b\)
ORciscounified_communications_managerMatch7.1\(5b\)su1
ORciscounified_communications_managerMatch7.1\(5b\)su1a
ORciscounified_communications_managerMatch7.1\(5b\)su2
ORciscounified_communications_managerMatch7.1\(5b\)su3
ORciscounified_communications_managerMatch7.1\(5b\)su4
ORciscounified_communications_managerMatch7.1\(5b\)su5
ORciscounified_communications_managerMatch7.1\(5b\)su6
ORciscounified_communications_managerMatch8.0
ORciscounified_communications_managerMatch8.0\(1\)
ORciscounified_communications_managerMatch8.0\(2\)
ORciscounified_communications_managerMatch8.0\(2a\)
ORciscounified_communications_managerMatch8.0\(2b\)
ORciscounified_communications_managerMatch8.0\(2c\)
ORciscounified_communications_managerMatch8.0\(2c\)su1
ORciscounified_communications_managerMatch8.0\(3\)
ORciscounified_communications_managerMatch8.0\(3a\)
ORciscounified_communications_managerMatch8.0\(3a\)su1
ORciscounified_communications_managerMatch8.0\(3a\)su2
ORciscounified_communications_managerMatch8.0\(3a\)su3
ORciscounified_communications_managerMatch8.5
ORciscounified_communications_managerMatch8.5\(1\)
ORciscounified_communications_managerMatch8.5\(1\)su1
ORciscounified_communications_managerMatch8.5\(1\)su2
ORciscounified_communications_managerMatch8.5\(1\)su3
ORciscounified_communications_managerMatch8.5\(1\)su4
ORciscounified_communications_managerMatch8.5\(1\)su5
ORciscounified_communications_managerMatch8.6
ORciscounified_communications_managerMatch8.6\(1\)
ORciscounified_communications_managerMatch8.6\(1a\)
ORciscounified_communications_managerMatch8.6\(2\)
ORciscounified_communications_managerMatch8.6\(2a\)
ORciscounified_communications_managerMatch8.6\(2a\)su1
ORciscounified_communications_managerMatch8.6\(2a\)su2
ORciscounified_communications_managerMatch8.6\(2a\)su3
ORciscounified_communications_managerMatch8.6\(3\)
ORciscounified_communications_managerMatch8.6\(4\)
ORciscounified_communications_managerMatch9.0\(1\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_communications_manager | * | cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 3.3(5) | cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\):*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 3.3(5)sr1 | cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr1:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 3.3(5)sr2a | cpe:2.3:a:cisco:unified_communications_manager:3.3\(5\)sr2a:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.1(3) | cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.1(3)sr1 | cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.1(3)sr2 | cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.1(3)sr3 | cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.1(3)sr4 | cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:* |
| cisco | unified_communications_manager | 4.2 | cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco Enterprise License Manager Path Traversal Vulnerability
2013-11-13 22:10:08
nvd
nvd
CVE-2013-6688
2013-11-18 03:55:06
prion
prion
Directory traversal
2013-11-18 03:55:00
cvelist
cvelist
CVE-2013-6688
2013-11-16 02:00:00
CVSS2
6.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:C/A:N
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
46.7%
Related for CVE-2013-6688