Lucene search
CiscoCVE-2014-3333HistoryAug 11, 2014 - 8:55 p.m.
CVE-2014-3333
2014-08-1120:55:07
CWE-264
cisco
web.nvd.nist.gov
33
cisco
unity connection
server
vulnerability
cisco unity connection 9.1
bug id cscup41014
cve-2014-3333
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
71.9%
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an “HTTP Intercept” attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Affected configurations
Node
ciscounity_connectionMatch9.1\(1\)
ORciscounity_connectionMatch9.1\(2\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unity_connection | 9.1(1) | cpe:2.3:a:cisco:unity_connection:9.1\(1\):*:*:*:*:*:*:* |
| cisco | unity_connection | 9.1(2) | cpe:2.3:a:cisco:unity_connection:9.1\(2\):*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-3333
2014-08-11 20:00:00
nvd
nvd
CVE-2014-3333
2014-08-11 20:55:07
prion
prion
Code injection
2014-08-11 20:55:00
cisco
cisco
Cisco Unity Connection HTTP Intercept Vulnerability
2014-08-07 20:10:52
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
71.9%
Related for CVE-2014-3333