medium6.8
CVE-2013-3406
The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authent…
Impact
The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Service Portal | Version 9.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31775
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31775