PT-2009-4500 · Cisco · Cisco Unified Contact Center Express (Ccx) Server+1

Published 2009-07-16 · Updated 2017-08-17 · CVE-2009-2047

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express (CCX) server versions prior to 7.0(1) SR2

Description A directory traversal issue exists in the Administration interface of Cisco Customer Response Solutions (CRS) in Cisco Unified Contact Center Express (CCX) server, allowing remote authenticated users to access, modify, or delete arbitrary files via unspecified vectors.

Recommendations For versions prior to 7.0(1) SR2, update to version 7.0(1) SR2 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-2047

Affected Products

Cisco Customer Response Solutions

Cisco Unified Contact Center Express (Ccx) Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-2047 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml · Vendor Advisory
• http://securityfocus.com/bid/35706 · Patch
• http://secunia.com/advisories/35861 · Note
• http://osvdb.org/55936 · Note
• http://securitytracker.com/id?1022569 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51731 · Note
• http://vupen.com/english/advisories/2009/1913 · Note