Directory traversal

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3430

CVE-2013-3430 affects Cisco Video Surveillance Manager (VSM) before 7.0.0. The issue allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT component. Cisco’s advisory notes multiple vulnerabilities in VSM pre-7....

CVE-2013-3430: Improper Authentication

Cisco Video Surveillance Manager VSM before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37288...

CVE-2013-3429: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3431: Improper Authentication

Cisco Video Surveillance Manager VSM before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package...