CVE-2013-3406

2022-10-0316:14:44

cisco

www.cve.org

cisco

services portal

vulnerability

arbitrary file read

remote authentication

intelligent automation

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.0%

JSON

The “Files Available for Download” implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406

tools.cisco.com/security/center/viewAlert.x?alertId=31775