A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.
oryginał ENCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCisco Hosted Collaboration Solution
APPCisco≤ 11.5\(3\)pb3
Powiązane podatności
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating Sy...
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHand...
A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified ...
A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote...
Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated ...