Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. Cisco Bug IDs: CSCvd90118.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Cisco Unity Connection 安全漏洞
Vulnerability Description
Cisco Unity Connection（UC）是美国思科（Cisco）公司的一套语音留言平台。该平台可利用语音命令，以“免提”方式拨打电话或者收听留言。 Cisco UC 10.5(2)版本中的‘ImageID’参数存在未授权访问漏洞，该漏洞源于程序没有正确的过滤HTTP POST参数中用户提交的输入。远程攻击者可利用该漏洞访问文件系统中任意位置的文件。
CVSS Information
N/A
Vulnerability Type
N/A