PT-2014-3781 · Cisco · Cisco Unified Communications Manager

Published 2014-02-04 · Updated 2018-01-03 · CVE-2014-0686

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager (aka Unified CM) versions 9.1(2.10000.28) and earlier

Description The issue allows local users to gain privileges by leveraging incorrect file permissions.

Recommendations For versions 9.1(2.10000.28) and earlier, update to a version that corrects the file permissions issue to prevent privilege escalation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0686

Affected Products

Cisco Unified Communications Manager

References · 7

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0686 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32683 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0686 · Security Note
• http://osvdb.org/102750 · Note
• http://securityfocus.com/bid/65281 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90852 · Note
• http://secunia.com/advisories/56818 · Note