CVEvulnerability
CVE-2013-1139
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.
Affected configurations
• cisco cloud portal 9.1
• cisco cloud portal 9.3
• cisco cloud portal 9.3.1
• cisco cloud portal 9.3.2
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28387 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28387 Vendor Advisory