CVE-2013-3406

2013-11-1602:00:00

cisco

www.cve.org

cisco

services portal

vulnerability

arbitrary file read

remote authentication

intelligent automation

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

40.0%

JSON

The “Files Available for Download” implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3406

tools.cisco.com/security/center/viewAlert.x?alertId=31775