Description (CNA)
A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.168) 12.0(0.98000.178) 12.0(0.98000.399) 12.0(0.98000.510) 12.0(0.98000.536) 12.0(0.98500.7).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Cisco Unified Reporting | affected Cisco Unified Reporting |
CWE
No CWE identifiers supplied.
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cur
- http://www.securityfocus.com/bid/94798
ADP enrichment
No English description supplied.