CVE-2013-6978
Summary
| CVE | CVE-2013-6978 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-12-21 14:22:57 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249. |
Risk And Classification
Primary CVSS: v2.0 4 from [email protected]
AV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS: 0.020910000 probability, percentile 0.796640000 (date 2026-07-22)
Problem Types: CWE-200 | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:S/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Unified Communications Manager | 3.3\(5\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 3.3\(5\)sr1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 3.3\(5\)sr2a | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.1\(3\)sr1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.1\(3\)sr2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.1\(3\)sr3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.1\(3\)sr4 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.3sr1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.3sr2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.2.3sr2b | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 4.3\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1.2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3d\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3e\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 5.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.0\(1a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.0\(1b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.0\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(2\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(4\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 6.1\(5\)su3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(1\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(1\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.0\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(2b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3a\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3b\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su4 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su5 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5b\)su6 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 7.1\(5\)su1a | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2b\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2c\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2c\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(3a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(3a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(3a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(3a\)su3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.0\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\)su3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\)su4 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.5\(1\)su5 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(1a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(2a\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(2a\)su1 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(2a\)su2 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(2a\)su3 | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(2\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(3\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 8.6\(4\) | All | All | All |
| Application | Cisco | Unified Communications Manager | 9.0\(1\) | All | All | All |
| Application | Cisco | Unified Communications Manager | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Unified Communications Manager DRS Flaw Lets Remote Authenticated Users Obtain Potentially Sensitive Information - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| osvdb.org/101162 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Cisco Security Notice: Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| Cisco Unified Communications Manager DRS Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Alert Details - Security Center - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.