Skip to main content

Socialminer CVE-2013-5489

MEDIUM
Permissions, Privileges, and Access Controls (CWE-264)
2013-09-13 psirt@cisco.com
Privilege Escalation Cisco Socialminer
5.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 13, 2013 - 14:10 cve.org
MEDIUM 5.0

DescriptionCVE.org

The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuh74125.

AnalysisAI

The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuh74125. Affected products include: Cisco Socialminer.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Socialminer

View all
CVE-2017-12337 CRITICAL
9.8 Nov 16

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2017-12216 HIGH
8.8 Sep 07

A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to

CVE-2017-6702 MEDIUM
6.1 Jul 04

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a c
CVE-2019-1668 MEDIUM
6.1 Jan 24

A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform
CVE-2018-15435 MEDIUM
6.1 Oct 17

A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attack
CVE-2025-20278 MEDIUM
6.0 Jun 04

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacke
CVE-2018-0290 MEDIUM
5.3 May 17

A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial

CVE-2013-5492 MEDIUM
5.0 Sep 13

administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network

CVE-2013-5483 MEDIUM
4.3 Sep 08

Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbit
CVE-2015-6356 MEDIUM
4.3 Nov 04

Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to inj
CVE-2025-20129 MEDIUM
4.3 Jun 04

A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMin

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2013-5489 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy