PT-2009-4500 · Cisco · Cisco Unified Contact Center Express (Ccx) Server+1

Publicado 2009-07-16 · Atualizado 2017-08-17 · CVE-2009-2047

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express (CCX) server versions prior to 7.0(1) SR2

Description A directory traversal issue exists in the Administration interface of Cisco Customer Response Solutions (CRS) in Cisco Unified Contact Center Express (CCX) server, allowing remote authenticated users to access, modify, or delete arbitrary files via unspecified vectors.

Recommendations For versions prior to 7.0(1) SR2, update to version 7.0(1) SR2 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-2047

Produtos afetados

Cisco Customer Response Solutions

Cisco Unified Contact Center Express (Ccx) Server

Referências · 8

• http://secunia.com/advisories/35861 · Nota
• http://osvdb.org/55936 · Nota
• http://securitytracker.com/id?1022569 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2047 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/35706 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51731 · Nota
• http://vupen.com/english/advisories/2009/1913 · Nota