Information Disclosure in Cisco Cloud Portal
CVE-2013-1139

Currently unrated

Key Information:

Vendor
Cisco
Status
Cloud Portal
Vendor
CVE Published:
27 February 2013

Summary

The nsAPI interface in Cisco Cloud Portal versions 9.1 SP1, 9.1 SP2, and 9.3 through 9.3.2 contains a flaw in privilege checking, which allows remote authenticated users to exploit this vulnerability. By crafting specific URLs, attackers can gain unauthorized access to sensitive information stored within the system, representing a significant risk to data confidentiality. This highlights a critical need for diligent access controls and regular audits to safeguard against potential exploitation.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.