CVE-2019-1854

CVE-2019-1854 is a directory traversal vulnerability in the management web interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server. An authenticated, remote attacker could exploit insufficient input validation by sending a crafted HTTP request. This could allow the attacker to bypass security restrictions and access the web interface of an associated Cisco Unified Communications Manager, though valid credentials would still be required for that interface. The vulnerability has a CVSS score of 4.3 (Medium) and is not known to be actively exploited, nor is there publicly available exploit code or significant community discussion.