CVE-2013-6978

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-21 · updated 2026-06-17
Weakness: CWE-200

Description

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.

Affected products

Cisco Unified Communications Manager: through 9.1\(1\); 3.3(5), 3.3(5)sr1, 3.3(5)sr2a, 4.1(3), 4.1(3)sr1, 4.1(3)sr2 (+106)

References

http://osvdb.org/101162
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
http://www.securityfocus.com/bid/64421
http://www.securitytracker.com/id/1029520
https://exchange.xforce.ibmcloud.com/vulnerabilities/89834
http://osvdb.org/101162
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978
http://tools.cisco.com/security/center/viewAlert.x?alertId=32219
http://www.securityfocus.com/bid/64421
http://www.securitytracker.com/id/1029520
https://exchange.xforce.ibmcloud.com/vulnerabilities/89834

Get alerted when CVE-2013-6978 or the next vulnerability affects your stack