CVE-2019-1911: Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability
A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1911?
CVE-2019-1911 is a vulnerability found in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software.
What is the severity of CVE-2019-1911?
The severity of CVE-2019-1911 is high, with a severity value of 7.8.
How does CVE-2019-1911 affect Cisco Hosted Collaboration Solution?
CVE-2019-1911 affects Cisco Hosted Collaboration Solution with a version up to and including 11.5(3)pb3.
What could an attacker do with CVE-2019-1911 vulnerability?
An authenticated, local attacker could escape the restricted shell and potentially execute unauthorized commands.
Is there a fix available for CVE-2019-1911?
Yes, Cisco has released a security advisory with information on how to mitigate this vulnerability.