CVE-2013-1139

Published: Feb 27, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.

Affected (5)

Products: Cisco: Cloud Portal

Cisco

1 product

Cloud Portal

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Cloud Portal	Version 9.1 sp1
Cisco Cloud Portal	Version 9.1 sp2
Cisco Cloud Portal	Version 9.3.1
Cisco Cloud Portal	Version 9.3.2
Cisco Cloud Portal	Version 9.3

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=28387

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=28387

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.