CVE-2016-6370: Path Traversal
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6370?
CVE-2016-6370 is classified as a high severity vulnerability due to its potential to expose sensitive files on affected systems.
How do I fix CVE-2016-6370?
To mitigate CVE-2016-6370, upgrade to a non-vulnerable version of Cisco Hosted Collaboration Mediation Fulfillment, specifically a version later than 10.6(3).
Who is affected by CVE-2016-6370?
CVE-2016-6370 affects users of Cisco Hosted Collaboration Mediation Fulfillment versions 10.6(1), 10.6(2), and 10.6(3).
What type of vulnerability is CVE-2016-6370?
CVE-2016-6370 is a directory traversal vulnerability that allows authenticated remote users to read arbitrary files.
What does CVE-2016-6370 allow an attacker to do?
CVE-2016-6370 allows attackers to access and retrieve sensitive files from the server through manipulated HTTP requests.