VAR-201302-0396
Vulnerability from variot - Updated: 2025-04-11 23:17The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134. Cisco Cloud Portal of nsAPI The interface contains a vulnerability where information can be obtained. The problem is Bug ID CSCud81134 It is a problem.Crafted by remotely authenticated users URL You may get important information through. A successful exploit of this issue allows an attacker to gain access to certain local files. Information obtained may aid in further attacks. This issue being tracked by Cisco Bug ID CSCud81134. Remote authentication attackers exploit this vulnerability to obtain sensitive information through specially crafted URLs
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201302-0396",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cloud portal",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "9.3"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "9.3.1"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "9.3.2"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "9.1"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 0.8,
"vendor": "cisco",
"version": "9.1 sp1 and sp2"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 0.8,
"vendor": "cisco",
"version": "9.3 to 9.3.2"
},
{
"model": "cloud portal",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9.4"
}
],
"sources": [
{
"db": "BID",
"id": "58174"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:cisco:cloud_portal",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco",
"sources": [
{
"db": "BID",
"id": "58174"
}
],
"trust": 0.3
},
"cve": "CVE-2013-1139",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CVE-2013-1139",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "VHN-61141",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:S/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-1139",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-1139",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201302-584",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-61141",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61141"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134. Cisco Cloud Portal of nsAPI The interface contains a vulnerability where information can be obtained. The problem is Bug ID CSCud81134 It is a problem.Crafted by remotely authenticated users URL You may get important information through. \nA successful exploit of this issue allows an attacker to gain access to certain local files. Information obtained may aid in further attacks. \nThis issue being tracked by Cisco Bug ID CSCud81134. Remote authentication attackers exploit this vulnerability to obtain sensitive information through specially crafted URLs",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-1139"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "BID",
"id": "58174"
},
{
"db": "VULHUB",
"id": "VHN-61141"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-1139",
"trust": 2.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584",
"trust": 0.7
},
{
"db": "NSFOCUS",
"id": "22755",
"trust": 0.6
},
{
"db": "SECUNIA",
"id": "52376",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20130225 CISCO CLOUD PORTAL INFORMATION DISCLOSURE VULNERABILITY",
"trust": 0.6
},
{
"db": "BID",
"id": "58174",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-61141",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61141"
},
{
"db": "BID",
"id": "58174"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"id": "VAR-201302-0396",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-61141"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-11T23:17:17.515000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Cisco Cloud Portal Information Disclosure Vulnerability",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1139"
},
{
"title": "28387",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=28387"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61141"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-1139"
},
{
"trust": 1.7,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=28387"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1139"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1139"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/52376"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/22755"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps11927/index.html"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61141"
},
{
"db": "BID",
"id": "58174"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-61141"
},
{
"db": "BID",
"id": "58174"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-02-27T00:00:00",
"db": "VULHUB",
"id": "VHN-61141"
},
{
"date": "2013-02-25T00:00:00",
"db": "BID",
"id": "58174"
},
{
"date": "2013-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"date": "2013-02-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"date": "2013-02-27T00:55:01.330000",
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-02-27T00:00:00",
"db": "VULHUB",
"id": "VHN-61141"
},
{
"date": "2013-02-25T00:00:00",
"db": "BID",
"id": "58174"
},
{
"date": "2013-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-001699"
},
{
"date": "2013-03-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201302-584"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2013-1139"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Cloud Portal of nsAPI Vulnerabilities that capture important information in the interface",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001699"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201302-584"
}
],
"trust": 0.6
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.