Guest

Preview Tool

Cisco Bug: CSCuj23004 - Tomcat allows the execution of arbitrary .JSP or .JSPX files

Last Modified

Feb 04, 2017

Products (1)

  • Cisco Unity Connection

Known Affected Releases

8.6(4.1) 9.0(1.7) 9.1(1.10)

Description (partial)

Symptoms: 
Cisco Unity Connection provides support for the installation of third add-ons to the product.  This may result in the ability to execute arbitrary .jsp and 
.jspx pages on the server should the ability to place such files onto the device be found.

Conditions: 
Cisco Unity Connection devices running an affected version of software.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.