PT-2013-2977 · Cisco · Cisco Unified Contact Center Express

Published 2013-04-24 · Updated 2018-10-30 · CVE-2013-1214

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express (affected versions not specified)

Description The issue concerns improper privilege management for anonymous logins in the scripts editor. This allows remote attackers to read arbitrary scripts by visiting the scripts repository directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-1214

Affected Products

Cisco Unified Contact Center Express

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-1214 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214 · Vendor Advisory