CVE-2013-1224

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2013-05-09

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Unified Customer Voice Portal (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp