medium4.0
CVE-2013-6978
The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensi…
Impact
The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | through 9.1\(1\) Versions 3.3\(5\), 3.3\(5\)sr1, 3.3\(5\)sr2a, 4.1\(3\), 4.1\(3\)sr1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/101162
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
- http://www.securityfocus.com/bid/64421
- http://www.securitytracker.com/id/1029520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89834
- http://osvdb.org/101162
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
- http://www.securityfocus.com/bid/64421
- http://www.securitytracker.com/id/1029520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89834