CVE-2017-6758

CVE-2017-6758 describes a directory traversal vulnerability in the web framework of Cisco Unified Communications Manager (CUCM) version 11.5(1.10000.6). An authenticated, remote attacker could exploit insufficient input validation to access arbitrary files within the web root directory. This vulnerability carries a CVSSv3 score of 6.5 (Medium), indicating a low attack complexity and no user interaction required, but it necessitates authentication for exploitation, leading to high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.