CVE-2013-3455 : Cisco Finesse allows remote attackers to obtain sensitive information by sniffin

Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.

Published 2013-08-12 10:58:49

Updated 2025-04-11 00:51:22

Source Cisco Systems, Inc.

View at NVD, CVE.org

Products affected by CVE-2013-3455

Cisco » Finesse » Version: N/A
cpe:2.3:a:cisco:finesse:-:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.28%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

http://www.securitytracker.com/id/1028897

Cisco Finesse Discloses Potentially Sensitive Information in Query Parameters - SecurityTracker
https://exchange.xforce.ibmcloud.com/vulnerabilities/86357

Cisco Finesse HTTP query data information disclosure CVE-2013-3455 Vulnerability Report
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3455

Cisco Finesse User Data in Query Vulnerability
Vendor Advisory

Jump to