Cisco Unified Contact Center Express CVE-2013-1214 Information Disclosure Vulnerability

Bugtraq ID:	59358
Class:	Design Error
CVE:	CVE-2013-1214
Remote:	Yes
Local:	No
Published:	Apr 19 2013 12:00AM
Updated:	Apr 19 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unified Contact Center Express 8.5(1) Cisco Unified Contact Center Express 8.5
Not Vulnerable:

Cisco Unified Contact Center Express CVE-2013-1214 Information Disclosure Vulnerability

Cisco Unified Contact Center Express is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain access sensitive information which may aid in further attacks.

This issue is tracked by Cisco BugId CSCuf77546.

Cisco Unified Contact Center Express 8.5(1) and prior versions are vulnerable.

Cisco Unified Contact Center Express CVE-2013-1214 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Contact Center Express CVE-2013-1214 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Contact Center Express CVE-2013-1214 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Contact Center Express Editor Information Disclosure Vulnerability (Cisco)
  
• Cisco Unified Contact Center Express Editor Information Disclosure Vulnerability (Cisco)