Unscored CVE-2014-0686 EUVD-2014-0717GHSA-7v4h-325x-vg9c

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging inco…

Published Feb 4, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908.

References

102750 vdb-entry
65281 vdb-entry
56818 third-party-advisory
20140131 Cisco Unified Communications Manager Operating System-Level Privilege Escalation Vulnerability vendor-advisory
cisco-ucm-cve20140686-priv-esc(90852) vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=32683