Unscored CVE-2013-3407 EUVD-2013-3342GHSA-gr7x-58ww-p88f

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, w…

Published Nov 16, 2013 · Updated Sep 16, 2024 · Assigned by cisco

Description

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=31776
20131114 Cisco Server Provisioner Web Interface Information Disclosure Vulnerability vendor-advisory