CVE-2013-3431 Information

Description

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages which allows remote attackers to obtain sensitive configuration archive and log information via unspecified vectors related to the Cisco_VSBWT (aka Broadware sample code) package aka Bug ID CSCsv40169.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm http://www.securityfocus.com/bid/61431 http://www.securitytracker.com/id/1028827 https://exchange.xforce.ibmcloud.com/vulnerabilities/85945