Information disclosure

2013-11-1803:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.0%

JSON

The “Files Available for Download” implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.

CPENameOperatorVersion
service_portaleq9.4.1

CPE	Name	Operator	Version
	service_portal	eq	9.4.1

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406

tools.cisco.com/security/center/viewAlert.x?alertId=31775