Vulnerability in Cisco Unified Contact Center Express Editor Software
CVE-2013-1214
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_contact_center_express_editor_software
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)