Summaryinfo

A vulnerability classified as critical was found in Cisco Unified Communications Manager, Unified Communications Manager Session Management Edition and Unified Communications Manager IM & Presence Service. This vulnerability affects unknown code of the component Database User Privilege Handler. The manipulation leads to absolute path traversal. This vulnerability was named CVE-2022-20791. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Detailsinfo

A vulnerability classified as critical has been found in Cisco Unified Communications Manager, Unified Communications Manager Session Management Edition and Unified Communications Manager IM & Presence Service (Unified Communication Software) (the affected version unknown). This affects an unknown part of the component Database User Privilege Handler. The manipulation with an unknown input leads to a absolute path traversal vulnerability. CWE is classifying the issue as CWE-36. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory. This is going to have an impact on confidentiality. The summary by CVE is:

A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. This vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the API to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device. The attacker would need valid user credentials to exploit this vulnerability.

The weakness was presented 07/07/2022 as cisco-sa-cucm-imp-afr-YBFLNyzd. It is possible to read the advisory at tools.cisco.com. This vulnerability is uniquely identified as CVE-2022-20791 since 11/02/2021. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Unified Communication Software

Vendor

• Cisco

Name

• Unified Communications Manager
• Unified Communications Manager IM & Presence Service
• Unified Communications Manager Session Management Edition

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion