CVE-2020-3130 is a vulnerability in Cisco Unity Connection
Published on September 23, 2020
Cisco Unity Connection Directory Traversal Vulnerability
A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web management interface. A successful exploit could allow the attacker to overwrite files on the underlying filesystem of an affected system. Valid administrator credentials are required to access the system.
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2020-3130 has been classified to as a Directory traversal vulnerability or weakness.
Products Associated with CVE-2020-3130
Want to know whenever a new CVE is published for Cisco Unity Connection? stack.watch will email you.
Affected Versions
Cisco Unity Connection Version n/a is affected by CVE-2020-3130Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.