CVE-2013-6978

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2013-12-21

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Unified Communications Manager (Cisco)

References

• http://osvdb.org/101162
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
• http://www.securityfocus.com/bid/64421
• http://www.securitytracker.com/id/1029520
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89834