CVE-2013-5528

CVE-2013-5528 is a directory traversal vulnerability in the Tomcat administrative web interface of Cisco Unified Communications Manager. This flaw allows remote authenticated attackers to read arbitrary files by injecting directory traversal sequences into an unspecified input string. With a CVSS score of 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N), it indicates a network-based attack requiring authentication, resulting in partial confidentiality impact. While not actively exploited in the wild (no KEV entry), exploit code is publicly available via ExploitDB and Nuclei templates, though community discussion and media coverage are minimal.