CVE-2013-3409

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230.

Metrics

CVSS 2.0 4.3/10AV:L/AC:L/Au:S/C:P/I:P/A:P

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published: Oct 10, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-34107.8Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (de CVE-2013-34117.8The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote att CVE-2013-34126.5SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execut CVE-2013-34134.3Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine (IS CVE-2013-34144.3Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote a CVE-2013-34157.8Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyCo CVE-2013-34164.3Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Opera CVE-2013-34175.0The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remot CVE-2013-34186.8Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated u CVE-2013-34194.3Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to inject arbitrary web scri CVE-2013-34206.8Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to CVE-2013-34214.3Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to injec