Vulnerability in Cisco Cloud Portal

CVE-2013-1139

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Cloud_portal — versions 9.1, 9.3, 9.3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)