Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546.Referenceshttp://tools.cisco.com/security/center/viewAlert.x?alertId=38763http://www.securitytracker.com/id/1032278