Cisco Unity Connection Directory Traversal Vulnerability

A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web management interface. A successful exploit could allow the attacker to overwrite files on the underlying filesystem of an affected system. Valid administrator credentials are required to access the system.

N/A

对路径名的限制不恰当(路径遍历)

Cisco Unity Connection 输入验证错误漏洞

Cisco Unity Connection（UC）是美国思科（Cisco）公司的一套语音留言平台。该平台可利用语音命令，以免提方式拨打电话或收听留言。 Cisco Unity Connection 11.5SU7版本和12.5SU2之前版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。

N/A

N/A