Lucene search

K
cveCiscoCVE-2014-0694
HistoryMar 14, 2014 - 10:55 a.m.

CVE-2014-0694

2014-03-1410:55:05
CWE-255
cisco
web.nvd.nist.gov
27
cisco
cloud portal
iac
cve-2014-0694
security
vulnerability
remote attack
cryptography
cleartext data

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

68.8%

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

Affected configurations

Nvd
Node
ciscocloud_portalRange≀9.4.1
OR
ciscocloud_portalMatch9.1sp1
OR
ciscocloud_portalMatch9.1sp2
OR
ciscocloud_portalMatch9.1sp3
OR
ciscocloud_portalMatch9.3
OR
ciscocloud_portalMatch9.3.1
OR
ciscocloud_portalMatch9.3.2
OR
ciscocloud_portalMatch9.4
VendorProductVersionCPE
ciscocloud_portal*cpe:2.3:a:cisco:cloud_portal:*:*:*:*:*:*:*:*
ciscocloud_portal9.1cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:*
ciscocloud_portal9.1cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:*
ciscocloud_portal9.1cpe:2.3:a:cisco:cloud_portal:9.1:sp3:*:*:*:*:*:*
ciscocloud_portal9.3cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:*
ciscocloud_portal9.3.1cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:*
ciscocloud_portal9.3.2cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:*
ciscocloud_portal9.4cpe:2.3:a:cisco:cloud_portal:9.4:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

68.8%

Related for CVE-2014-0694