Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hvvh-mw8j-7rfj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

EPSS

Процентиль: 59%
0.00377
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
больше 12 лет назад

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

EPSS

Процентиль: 59%
0.00377
Низкий

Дефекты

CWE-20