Description
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214
Scores
EPSS
0.0119
EPSS Percentile
64.6%
Details
CWE
CWE-264
Status
published
Products (1)
cisco/unified_contact_center_express_editor_software
Published
Apr 24, 2013
Tracked Since
Feb 18, 2026