Unscored CVE-2013-3457 EUVD-2013-3392GHSA-fpv9-pw36-hv2f

Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct…

Published Aug 12, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772.

References

20130809 Cisco Finesse Directory Read Vulnerability vendor-advisory
cisco-finesse-cve20133457-info-disc(86356) vdb-entry
1028896 vdb-entry