CVE-2013-3407

The CVE-2013-3407 issue affects Cisco Server Provisioner (SP) Web Interface for version 6.4.0 Patch 5-1301292331 and earlier. The vulnerability is an authentication bypass/information disclosure: the web interface allows remote attackers to access certain pages without authentication by direct re...

Cisco Server Provisioner Web Interface Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Server Provisioner could allow an unauthenticated, remote attacker to access some pages directly that should require authentication. The vulnerability is due to a failure to enforce access controls for the vulnerable pages. An attacker could exploit...