Lucene search

K
nvd[email protected]NVD:CVE-2013-1214
HistoryApr 24, 2013 - 10:28 a.m.

CVE-2013-1214

2013-04-2410:28:37
CWE-264
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.1%

The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.

Affected configurations

NVD
Node
ciscounified_contact_center_express_editor_softwareMatch-
AND
ciscounified_contact_center_express_editor_softwareMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.1%

Related for NVD:CVE-2013-1214