CVE-2013-1139 — MEDIUM (4.0)

Vulnerability Description

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.

CVSS Score

4.0

MEDIUM

AV:N/AC:L/Au:S/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Cisco	Cloud Portal	9.1

Related Weaknesses (CWE)

CWE-264

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=28387Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=28387Vendor Advisory

FAQ

What is CVE-2013-1139?

CVE-2013-1139 is a vulnerability with a CVSS score of 4.0 (MEDIUM). The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a craf...

How severe is CVE-2013-1139?

CVE-2013-1139 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1139?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Cloud Portal.