PT-2013-2953 · Cisco · Cisco Unified Computing System

Published 2013-04-25 · Updated 2013-04-25 · CVE-2013-1185

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System (UCS) versions 1.x through 2.0(2m)

Description The issue allows remote attackers to obtain sensitive information by reading a technical-support bundle file or on-device configuration backup.

Recommendations For versions 1.x through 2.0(2m), update to version 2.0(2m) or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-1185

Affected Products

Cisco Unified Computing System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-1185 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti · Vendor Advisory