Unscored CVE-2016-6370 EUVD-2016-7293GHSA-6cqx-qc5v-r3pg

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allo…

Published Sep 12, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.

References

1036718 vdb-entry
92704 vdb-entry
20160831 Cisco Hosted Collaboration Mediation Fulfillment Authenticated Directory Traversal Vulnerability vendor-advisory