Vulnerability Name:

CVE-2013-1185 (CCN-83773)

Assigned:2013-04-24
Published:2013-04-24
Updated:2013-04-25
Summary:The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-200
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2013-1185

Source: CCN
Type: SA53188
Cisco Unified Computing System Multiple Vulnerabilities

Source: CCN
Type: cisco-sa-20130424-ucsmulti
Multiple Vulnerabilities in Cisco Unified Computing System

Source: CISCO
Type: Vendor Advisory
20130424 Multiple Vulnerabilities in Cisco Unified Computing System

Source: CCN
Type: BID-59459
Cisco Unified Computing System CVE-2013-1185 Information Disclosure Vulnerability

Source: XF
Type: UNKNOWN
cisco-cve20131185-info-disc(83773)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0(2k):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1a):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1d):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1c):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1n):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1o):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1p):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1t):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1w):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1y):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(1j):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3i):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3l):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3s):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3u):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3y):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(4f):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(4g):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(4i):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(4j):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(4k):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1s):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1t):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1w):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1x):*:*:*:*:*:*:*
  • AND
  • cpe:/h:cisco:unified_computing_system_6120xp_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6140xp_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6248up_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6296up_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_integrated_management_controller:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    cisco unified computing system infrastructure and unified computing system software 1.0
    cisco unified computing system infrastructure and unified computing system software 1.0(2k)
    cisco unified computing system infrastructure and unified computing system software 1.1
    cisco unified computing system infrastructure and unified computing system software 1.1(1m)
    cisco unified computing system infrastructure and unified computing system software 1.2
    cisco unified computing system infrastructure and unified computing system software 1.2(1)
    cisco unified computing system infrastructure and unified computing system software 1.2(1a)
    cisco unified computing system infrastructure and unified computing system software 1.2(1d)
    cisco unified computing system infrastructure and unified computing system software 1.3(1c)
    cisco unified computing system infrastructure and unified computing system software 1.3(1m)
    cisco unified computing system infrastructure and unified computing system software 1.3(1n)
    cisco unified computing system infrastructure and unified computing system software 1.3(1o)
    cisco unified computing system infrastructure and unified computing system software 1.3(1p)
    cisco unified computing system infrastructure and unified computing system software 1.3(1q)
    cisco unified computing system infrastructure and unified computing system software 1.3(1t)
    cisco unified computing system infrastructure and unified computing system software 1.3(1w)
    cisco unified computing system infrastructure and unified computing system software 1.3(1y)
    cisco unified computing system infrastructure and unified computing system software 1.4(1j)
    cisco unified computing system infrastructure and unified computing system software 1.4(1m)
    cisco unified computing system infrastructure and unified computing system software 1.4(3i)
    cisco unified computing system infrastructure and unified computing system software 1.4(3l)
    cisco unified computing system infrastructure and unified computing system software 1.4(3m)
    cisco unified computing system infrastructure and unified computing system software 1.4(3q)
    cisco unified computing system infrastructure and unified computing system software 1.4(3s)
    cisco unified computing system infrastructure and unified computing system software 1.4(3u)
    cisco unified computing system infrastructure and unified computing system software 1.4(3y)
    cisco unified computing system infrastructure and unified computing system software 1.4(4f)
    cisco unified computing system infrastructure and unified computing system software 1.4(4g)
    cisco unified computing system infrastructure and unified computing system software 1.4(4i)
    cisco unified computing system infrastructure and unified computing system software 1.4(4j)
    cisco unified computing system infrastructure and unified computing system software 1.4(4k)
    cisco unified computing system infrastructure and unified computing system software 2.0(1q)
    cisco unified computing system infrastructure and unified computing system software 2.0(1s)
    cisco unified computing system infrastructure and unified computing system software 2.0(1t)
    cisco unified computing system infrastructure and unified computing system software 2.0(1w)
    cisco unified computing system infrastructure and unified computing system software 2.0(1x)
    cisco unified computing system 6120xp fabric interconnect -
    cisco unified computing system 6140xp fabric interconnect -
    cisco unified computing system 6248up fabric interconnect -
    cisco unified computing system 6296up fabric interconnect -
    cisco unified computing system integrated management controller -