CVE-2013-1214

Published: Apr 24, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.

Affected (1)

Products: Cisco: Unified Contact Center Express Editor Software

1 product

Unified Contact Center Express Editor Software

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Contact Center Express Editor Software	All versions

Related CWEs

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.