Design/Logic Flaw

2013-09-2310:18:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

JSON

The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344.

References

osvdb.org/97532

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5502

tools.cisco.com/security/center/viewAlert.x?alertId=30934