CVE-2013-3409

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-10 · updated 2026-06-16
Weakness: CWE-255

Description

The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230.

Affected products

Cisco Prime Central For Hosted Collaboration Solution: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3409
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3409

Get alerted when CVE-2013-3409 or the next vulnerability affects your stack