Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1214
cve
2013
1214
cisco
unified contact center express
unified ccx
scripts
remote attackers
privileges
cscuf77546
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.0%
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
Affected configurations
Node
ciscounified_contact_center_express_editor_softwareMatch-
ciscounified_contact_center_express_editor_softwareMatch-
Related
prion
prion
Design/Logic Flaw
2013-04-24 10:28:00
cvelist
cvelist
CVE-2013-1214
2022-10-03 16:14:48
nvd
nvd
CVE-2013-1214
2013-04-24 10:28:37
cisco
cisco
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.0%
Related for CVE-2013-1214