CVE-2013-3434

Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@cisco.com

Published

2013-07-18

Last modified

2024-08-06

Affected products

• Unified Communications Manager (Cisco)

References

• http://osvdb.org/95403
• http://secunia.com/advisories/54249
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
• http://www.securityfocus.com/bid/61296