CVE-2017-6758

A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/100119Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039064Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1Vendor Advisory
• http://www.securityfocus.com/bid/100119Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039064Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCve13796Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ucm1Vendor Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6752A vulnerability in the web interface of the Cisco Adaptive S…
• CVE-2017-6753A vulnerability in Cisco WebEx browser extensions for Google…
• CVE-2017-6754A vulnerability in the web-based management interface of the…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6756A vulnerability in the Web UI Application of the Cisco Prime…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6759A vulnerability in the UpgradeManager of the Cisco Prime Col…
• CVE-2017-6761A vulnerability in the web-based management interface of Cis…
• CVE-2017-6762A vulnerability in the web-based management interface of Cis…
• CVE-2017-6763A vulnerability in the implementation of the H.264 protocol …
• CVE-2017-6764A vulnerability in the web-based management interface of Cis…
• CVE-2017-6765A vulnerability in the web-based management interface of Cis…