CVE-2013-1224

2013-05-0910:00:00

cisco

www.cve.org

cisco

directory traversal

remote attackers

arbitrary files

http

https

parameter validation

bug id

vulnerability

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

48.6%

JSON

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.