CVE-2013-1223

Опубликовано: 09 мая 2013

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_customer_voice_portal:*:*:*:*:*:*:*:*

Версия до 9.0\(1\) (включая)

cpe:2.3:a:cisco:unified_customer_voice_portal:3.0:sr1:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:3.0:sr2:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:3.6\(10\):es01:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:4.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:4.0\(2\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:4.0\(2\):sr1:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:4.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:7.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:7.0\(2\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:8.0\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:8.5\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_customer_voice_portal:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00377

Низкий

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-hvvh-mw8j-7rfj

github

больше 3 лет назад