CVEvulnerability

CVE-2013-1214

5.0 MEDIUM Published 2013-04-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-04-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-264

Description

The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.

Affected configurations

• cisco unified contact center express editor software

Weakness · not in database (1)

CWE-264

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214 Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214 Vendor Advisory

CVE-2013-1214

Description

Affected configurations

Related

Weakness · not in database (1)

References