var-201309-0453
Vulnerability from variot
DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029. Vendors have confirmed this vulnerability Bug ID CSCue77029 It is released as.A third party may be able to read arbitrary files. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. Without prior authentication, an attacker could invoke the DownloadServlet to disclose an arbitrary file from the file system. With this information, a remote attacker could abuse this to execute arbitrary code against the target server. Successfully exploiting this issue may allow an attacker to gain access to certain arbitrary files. Information obtained may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCue77029. The manager provides multi-protocol management of the network and provides troubleshooting capabilities for switch health and performance
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201309-0453",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "6.1\\(1a\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1\\(4\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1\\(3\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.2\\(2c\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "6.1\\(1b\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1\\(2\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.2\\(2e\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.2\\(2\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.2\\(2a\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "4.2\\(3\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.1\\(2\\)"
},
{
"model": "prime data center network manager",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "6.1\\(1b\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.1\\(1\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "4.1\\(5\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.0\\(3\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.2\\(2b\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.1\\(3u\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "5.0\\(2\\)"
},
{
"model": "prime data center network manager",
"scope": "eq",
"trust": 1.0,
"vendor": "cisco",
"version": "4.2\\(1\\)"
},
{
"model": "prime data center network manager",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "6.2(1)"
},
{
"model": "data center network manager",
"scope": null,
"trust": 0.7,
"vendor": "cisco",
"version": null
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:cisco:prime_data_center_network_manager",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Andrea Micalizzi aka rgod",
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
}
],
"trust": 0.7
},
"cve": "CVE-2013-5487",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2013-5487",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-5487",
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "MEDIUM",
"trust": 0.7,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-65489",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-5487",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2013-5487",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2013-5487",
"trust": 0.7,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201309-370",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-65489",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "VULHUB",
"id": "VHN-65489"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029. Vendors have confirmed this vulnerability Bug ID CSCue77029 It is released as.A third party may be able to read arbitrary files. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. Without prior authentication, an attacker could invoke the DownloadServlet to disclose an arbitrary file from the file system. With this information, a remote attacker could abuse this to execute arbitrary code against the target server. \nSuccessfully exploiting this issue may allow an attacker to gain access to certain arbitrary files. Information obtained may aid in further attacks. \nThis issue is being tracked by Cisco Bug ID CSCue77029. The manager provides multi-protocol management of the network and provides troubleshooting capabilities for switch health and performance",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-5487"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "BID",
"id": "62483"
},
{
"db": "VULHUB",
"id": "VHN-65489"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-5487",
"trust": 3.5
},
{
"db": "BID",
"id": "62483",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-1768",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-13-256",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20130918 MULTIPLE VULNERABILITIES IN CISCO PRIME DATA CENTER NETWORK MANAGER",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-65489",
"trust": 0.1
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "VULHUB",
"id": "VHN-65489"
},
{
"db": "BID",
"id": "62483"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"id": "VAR-201309-0453",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-65489"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T22:08:29.556000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20130918-dcnm",
"trust": 1.5,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm"
},
{
"title": "30682",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=30682"
},
{
"title": "30756",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=30756"
},
{
"title": "cisco-sa-20130918-dcnm",
"trust": 0.8,
"url": "http://www.cisco.com/cisco/web/support/JP/111/1119/1119892_cisco-sa-20130918-dcnm-j.html"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65489"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20130918-dcnm"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5487"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5487"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/62483"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "VULHUB",
"id": "VHN-65489"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"db": "VULHUB",
"id": "VHN-65489"
},
{
"db": "BID",
"id": "62483"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-11-24T00:00:00",
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"date": "2013-09-23T00:00:00",
"db": "VULHUB",
"id": "VHN-65489"
},
{
"date": "2013-09-18T00:00:00",
"db": "BID",
"id": "62483"
},
{
"date": "2013-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"date": "2013-09-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"date": "2013-09-23T10:18:59.173000",
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-11-24T00:00:00",
"db": "ZDI",
"id": "ZDI-13-256"
},
{
"date": "2013-09-23T00:00:00",
"db": "VULHUB",
"id": "VHN-65489"
},
{
"date": "2013-11-27T00:24:00",
"db": "BID",
"id": "62483"
},
{
"date": "2013-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004278"
},
{
"date": "2013-09-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201309-370"
},
{
"date": "2024-11-21T01:57:34.253000",
"db": "NVD",
"id": "CVE-2013-5487"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Prime Data Center Network Manager of DCNM-SAN Vulnerability to read arbitrary files on server",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004278"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201309-370"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…