Information disclosure in Cisco Unified Computing System 6120xp Fabric Interconnect
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
Vulnerability class: Information Disclosure
EPSS: 0.018 (77.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.3\(1o\), 1.3(1p), 1.4\(1j\)
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)