« Volver al listado

CVE-2013-1139

Estado: ModificadaMedia (4)—

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Cloud Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1139",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-02-27T00:55:01.330",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=28387",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=28387",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134."
    },
    {
      "lang": "es",
      "value": "La interfaz nsAPI de Cisco Cloud Portal v9.1 SP1 y SP2, y v9.3 hasta v9.3.2, no comprueba de forma correcta los privilegios, lo que permite a usuarios autenticados de forma remota conseguir información por URL manuales, alias Bug ID CSCud81134."
    }
  ],
  "lastModified": "2026-06-16T23:50:54.407",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B42A12C4-FBA7-4A24-BD71-652DB9329766"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "257939F1-2806-48FC-A553-FBB8F974D041"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "687EF522-0EDA-4572-B41C-5BEC96B93948"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C79C4C7F-A148-41CB-A80F-285CAFD9599E"
            },
            {
              "criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D66F9DC-FDBB-471B-8453-5452A7C5D124"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}