CVE Daily

CVE-2013-6978

The disaster recovery system (DRS) component in Cisco Unified Communications Man...

Medium CVSS 4.0

Overview

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.

CWE: CWE-200 Published: 2013-12-21T14:22:57.190
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags