CVE-2013-3406

The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@cisco.com

Published

2013-11-18

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Service Portal (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406
• http://tools.cisco.com/security/center/viewAlert.x?alertId=31775