Cisco Bug: CSCuj23004 - Tomcat allows the execution of arbitrary .JSP or .JSPX files
Feb 04, 2017
- Cisco Unity Connection
Known Affected Releases
8.6(4.1) 9.0(1.7) 9.1(1.10)
Symptoms: Cisco Unity Connection provides support for the installation of third add-ons to the product. This may result in the ability to execute arbitrary .jsp and .jspx pages on the server should the ability to place such files onto the device be found. Conditions: Cisco Unity Connection devices running an affected version of software.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases