Information disclosure in Cisco Unified_computing_system_6120xp_fabric_interconnect
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configura…
Vulnerability class: Information Disclosure
EPSS: 0.006 (69.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.0, 1.0\(2k\), 1.1
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- 20130424 Multiple Vulnerabilities in Cisco Unified Computing System (x_refsource_CISCO, vendor-advisory, Vendor Advisory)