Sign-up

ID

VAR-201312-0286


CVE

CVE-2013-6978


TITLE

Cisco Unified Communications Manager Vulnerability in obtaining critical device information in disaster recovery system components

Trust: 0.8

sources: JVNDB: JVNDB-2013-005687

DESCRIPTION

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. This issue is being tracked by Cisco BugId CSCuj39249. This component provides a scalable, distributed and highly available enterprise IP telephony call processing solution

Trust: 1.98

sources: NVD: CVE-2013-6978 // JVNDB: JVNDB-2013-005687 // BID: 64421 // VULHUB: VHN-66980

AFFECTED PRODUCTS

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(3c\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(3e\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(2a\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1.2

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(2\)su1

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(3d\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(3a\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(3\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(2\)su1a

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(2b\)

Trust: 1.6

vendor:ciscomodel:unified communications managerscope:eqversion:6.0

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5\)su1a

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(2a\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(3\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:3.3\(5\)sr1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su5

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(2\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.0\(1b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(5\)su3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:9.0\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3b\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)su5

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.3sr2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:3.3\(5\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(2a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(5\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3a\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(3\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(5\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(1c\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su6

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(3b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(4a\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(2a\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:lteversion:9.1\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(3a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(3a\)su3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(2\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(1b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(1a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(2a\)su3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(2a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(1a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)su4

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.3\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(2a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.1\(3\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(1\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(2\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(2a\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.1\(3\)sr1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(2b\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)su3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su4

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(3a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(2a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(3a\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(2a\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(4\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.3sr1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(3b\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(2b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.0\(1\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(2c\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(4\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(1\)su1a

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(4a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(5\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.1\(3\)sr2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(3\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.1\(3\)sr3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.0

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:3.3\(5\)sr2a

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.1\(3\)sr4

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3a\)su1a

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:5.1\(2\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.0\(2a\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.3

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.6\(2\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(3a\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.5\(1\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(2b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:4.2.3sr2b

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(4\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.0\(1a\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:8.0\(2c\)su1

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:6.1\(1b\)

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(5b\)su1a

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:eqversion:7.1\(3b\)su2

Trust: 1.0

vendor:ciscomodel:unified communications managerscope:lteversion:9.1(1)

Trust: 0.8

vendor:ciscomodel:unified communications managerscope:eqversion:8.0(1)

Trust: 0.3

sources: BID: 64421 // JVNDB: JVNDB-2013-005687 // CNNVD: CNNVD-201312-450 // NVD: CVE-2013-6978

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-6978
value: MEDIUM

Trust: 1.0

NVD: CVE-2013-6978
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201312-450
value: MEDIUM

Trust: 0.6

VULHUB: VHN-66980
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2013-6978
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-66980
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-66980 // JVNDB: JVNDB-2013-005687 // CNNVD: CNNVD-201312-450 // NVD: CVE-2013-6978

PROBLEMTYPE DATA

problemtype:CWE-200

Trust: 1.9

sources: VULHUB: VHN-66980 // JVNDB: JVNDB-2013-005687 // NVD: CVE-2013-6978

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201312-450

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201312-450

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-005687

PATCH
title:Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerabilityurl:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
Trust: 0.8
title:32219url:http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2013-005687

EXTERNAL IDS
db:NVDid:CVE-2013-6978
Trust: 2.8
db:BIDid:64421
Trust: 1.4
db:OSVDBid:101162
Trust: 1.1
db:SECTRACKid:1029520
Trust: 1.1
db:JVNDBid:JVNDB-2013-005687
Trust: 0.8
db:CNNVDid:CNNVD-201312-450
Trust: 0.7
db:CISCOid:20131218 CISCO UNIFIED COMMUNICATIONS MANAGER SENSITIVE INFORMATION DISCLOSURE VULNERABILITY
Trust: 0.6
db:VULHUBid:VHN-66980
Trust: 0.1
sources:
            
            
            VULHUB: VHN-66980 // 
            
            
            
            BID: 64421 // 
            
            
            
            JVNDB: JVNDB-2013-005687 // 
            
            
            
            CNNVD: CNNVD-201312-450 // 
            
            
            
            NVD: CVE-2013-6978

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-6978
Trust: 1.7
url:http://tools.cisco.com/security/center/viewalert.x?alertid=32219
Trust: 1.7
url:http://www.securityfocus.com/bid/64421
Trust: 1.1
url:http://osvdb.org/101162
Trust: 1.1
url:http://www.securitytracker.com/id/1029520
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/89834
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-6978
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-6978
Trust: 0.8
url:http://www.cisco.com/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-66980 // 
            
            
            
            BID: 64421 // 
            
            
            
            JVNDB: JVNDB-2013-005687 // 
            
            
            
            CNNVD: CNNVD-201312-450 // 
            
            
            
            NVD: CVE-2013-6978

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 64421

SOURCES
db:VULHUBid:VHN-66980
db:BIDid:64421
db:JVNDBid:JVNDB-2013-005687
db:CNNVDid:CNNVD-201312-450
db:NVDid:CVE-2013-6978

LAST UPDATE DATE
2024-11-23T22:49:33.015000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-66980date:2017-08-29T00:00:00
db:BIDid:64421date:2013-12-19T10:50:00
db:JVNDBid:JVNDB-2013-005687date:2013-12-25T00:00:00
db:CNNVDid:CNNVD-201312-450date:2013-12-24T00:00:00
db:NVDid:CVE-2013-6978date:2024-11-21T02:00:05.790

SOURCES RELEASE DATE
db:VULHUBid:VHN-66980date:2013-12-21T00:00:00
db:BIDid:64421date:2013-12-18T00:00:00
db:JVNDBid:JVNDB-2013-005687date:2013-12-25T00:00:00
db:CNNVDid:CNNVD-201312-450date:2013-12-24T00:00:00
db:NVDid:CVE-2013-6978date:2013-12-21T14:22:57.190