CVE-2013-5489 | BDVDB-2026-57406 Detail

Description#

The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuh74125.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/viewAlert.x?alertId=30734
https://exchange.xforce.ibmcloud.com/vulnerabilities/86965
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5489

Exploit#

No public exploit known

History#

Version 12013-09-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.