PT-2013-5575 · Cisco · Cisco Prime Data Center Network Manager

Publicado 2013-09-23 · Atualizado 2017-08-29 · CVE-2013-5490

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager (DCNM) versions prior to 6.2(1)

Description The issue allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Recommendations For versions prior to 6.2(1), update to version 6.2(1) or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-5490

Produtos afetados

Cisco Prime Data Center Network Manager

Referências · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5490 · Nota de Segurança
• http://securityfocus.com/bid/62485 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87191 · Nota