Lucene search
CiscoCVE-2014-3352HistoryAug 30, 2014 - 10:00 a.m.
CVE-2014-3352
2014-08-3010:00:00
CWE-20
cisco
web.nvd.nist.gov
22
cisco
intelligent automation
cloud
cisco cloud portal
cve-2014-3352
iframe vulnerability
bug id cscuh84801
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.006
Percentile
78.6%
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an “iFrame vulnerability,” aka Bug ID CSCuh84801.
Affected configurations
Node
ciscocloud_portalRange≤2008.3sp9
ORciscocloud_portalMatch9.1sp1
ORciscocloud_portalMatch9.1sp2
ORciscocloud_portalMatch9.1sp3
ORciscocloud_portalMatch9.3
ORciscocloud_portalMatch9.3.1
ORciscocloud_portalMatch9.3.2
ORciscocloud_portalMatch9.4
ORciscocloud_portalMatch2008.3
ORciscocloud_portalMatch2008.3sp6
ORciscocloud_portalMatch2008.3sp7
ORciscocloud_portalMatch2008.3sp8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cloud_portal | * | cpe:2.3:a:cisco:cloud_portal:*:sp9:*:*:*:*:*:* |
| cisco | cloud_portal | 9.1 | cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:* |
| cisco | cloud_portal | 9.1 | cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:* |
| cisco | cloud_portal | 9.1 | cpe:2.3:a:cisco:cloud_portal:9.1:sp3:*:*:*:*:*:* |
| cisco | cloud_portal | 9.3 | cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:* |
| cisco | cloud_portal | 9.3.1 | cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:* |
| cisco | cloud_portal | 9.3.2 | cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:* |
| cisco | cloud_portal | 9.4 | cpe:2.3:a:cisco:cloud_portal:9.4:*:*:*:*:*:*:* |
| cisco | cloud_portal | 2008.3 | cpe:2.3:a:cisco:cloud_portal:2008.3:*:*:*:*:*:*:* |
| cisco | cloud_portal | 2008.3 | cpe:2.3:a:cisco:cloud_portal:2008.3:sp6:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-3352
2014-08-30 09:55:05
cisco
cisco
Cisco Intelligent Automation for Cloud iFrame Vulnerability
2014-08-29 14:26:56
cvelist
cvelist
CVE-2014-3352
2014-08-30 10:00:00
prion
prion
Design/Logic Flaw
2014-08-30 09:55:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.006
Percentile
78.6%
Related for CVE-2014-3352