Description
The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://osvdb.org/101162 ↗
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32219 ↗
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978 ↗
- http://www.securitytracker.com/id/1029520 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89834 ↗
- http://www.securityfocus.com/bid/64421 ↗