CVE-2016-6371: Path Traversal
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6371?
CVE-2016-6371 is rated as a high severity vulnerability due to its potential for remote file system manipulation.
How do I fix CVE-2016-6371?
To fix CVE-2016-6371, upgrade to the latest version of Cisco Hosted Collaboration Mediation Fulfillment that addresses this vulnerability.
What type of vulnerability is CVE-2016-6371?
CVE-2016-6371 is a directory traversal vulnerability that allows attackers to write to arbitrary files.
Which versions of Cisco Hosted Collaboration Mediation Fulfillment are affected by CVE-2016-6371?
CVE-2016-6371 affects versions 10.6(1) base, 10.6(2) base, and 10.6(3) base of Cisco Hosted Collaboration Mediation Fulfillment.
Can CVE-2016-6371 be exploited remotely?
Yes, CVE-2016-6371 can be exploited remotely by attackers through a crafted URL.