administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780.
http://www.securitytracker.com/id/1029033
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5492