CVE-2013-1223

2022-10-0316:14:47

CWE-20

[email protected]

web.nvd.nist.gov

cisco

unified customer voice portal

cvp software

cve-2013-1223

security vulnerability

remote attack

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.002 Low

EPSS

Percentile

55.8%

JSON

The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372.

Affected configurations

NVD

Node

ciscounified_customer_voice_portalRange≤9.0\(1\)

ciscounified_customer_voice_portalMatch3.0sr1

ciscounified_customer_voice_portalMatch3.0sr2

ciscounified_customer_voice_portalMatch3.6\(10\)es01

ciscounified_customer_voice_portalMatch4.0

ciscounified_customer_voice_portalMatch4.0\(2\)

ciscounified_customer_voice_portalMatch4.0\(2\)sr1

ciscounified_customer_voice_portalMatch4.1

ciscounified_customer_voice_portalMatch7.0

ciscounified_customer_voice_portalMatch7.0\(2\)

ciscounified_customer_voice_portalMatch8.0\(1\)

ciscounified_customer_voice_portalMatch8.5\(1\)

ciscounified_customer_voice_portalMatch9.0

CPENameOperatorVersion
cisco:unified_customer_voice_portalcisco unified customer voice portalle9.0\(1\)
cisco:unified_customer_voice_portalcisco unified customer voice portaleq3.0
cisco:unified_customer_voice_portalcisco unified customer voice portaleq3.6\(10\)
cisco:unified_customer_voice_portalcisco unified customer voice portaleq4.0
cisco:unified_customer_voice_portalcisco unified customer voice portaleq4.0\(2\)
cisco:unified_customer_voice_portalcisco unified customer voice portaleq4.1
cisco:unified_customer_voice_portalcisco unified customer voice portaleq7.0
cisco:unified_customer_voice_portalcisco unified customer voice portaleq7.0\(2\)
cisco:unified_customer_voice_portalcisco unified customer voice portaleq8.0\(1\)
cisco:unified_customer_voice_portalcisco unified customer voice portaleq8.5\(1\)

CPE	Name	Operator	Version
cisco:unified_customer_voice_portal	cisco unified customer voice portal	le	9.0\(1\)
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	3.0
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	3.6\(10\)
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	4.0
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	4.0\(2\)
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	4.1
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	7.0
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	7.0\(2\)
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	8.0\(1\)
cisco:unified_customer_voice_portal	cisco unified customer voice portal	eq	8.5\(1\)