Unscored CVE-2013-6978 EUVD-2013-6779GHSA-wg9v-ffh8-2wwj

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated u…

Published Dec 21, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.

References

101162 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
20131218 Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerability vendor-advisory
1029520 vdb-entry
cisco-ucm-cve20136978-info-disc(89834) vdb-entry
64421 vdb-entry