CVE-2012-6609 Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name....
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom hdx video end points | < 3.0.4 | 3.0.4 |
| polycom uc apl | < 2.7.1.j | 2.7.1.j |
References
- seclists.org mailing-list third-party-advisory
- web.archive.org third-party-advisory