CVE-2013-3398

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, aka Bug ID CSCuh64574.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2013-06-26

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Prime Central For Hosted Collaboration Solution (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3398