Path Traversal in Cisco Customer Response Solution
CVE-2010-1571
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.029 (86.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Customer_response_solution — versions 7.0, 5.0, 6.0
- Cisco Unified_contact_center_express — versions 7.0, 5.0, 6.0
- Cisco Unified_ip_interactive_voice_response — versions 7.0, 5.0, 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)