PT-2013-5575 · Cisco · Cisco Prime Data Center Network Manager

Published 2013-09-23 · Updated 2017-08-29 · CVE-2013-5490

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager (DCNM) versions prior to 6.2(1)

Description The issue allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Recommendations For versions prior to 6.2(1), update to version 6.2(1) or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-5490

Affected Products

Cisco Prime Data Center Network Manager

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5490 · Security Note
• http://securityfocus.com/bid/62485 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87191 · Note