CVE-2013-3398

2013-06-2621:00:00

cisco

www.cve.org

cisco prime central

hcs assurance

remote attackers

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

46.6%

JSON

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, aka Bug ID CSCuh64574.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3398