Information disclosure in Cisco Prime Central For Hosted Collaboration Solution
CVE-2013-3398
The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, aka Bug ID CSCuh64574.
Vulnerability class: Information Disclosure
EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Prime_central_for_hosted_collaboration_solution
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)