CVE-2014-0694

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:cloud_portal::::::::
	cpe:2.3:a:cisco:cloud_portal:9.1:sp1::::::
	cpe:2.3:a:cisco:cloud_portal:9.1:sp2::::::
	cpe:2.3:a:cisco:cloud_portal:9.1:sp3::::::
	cpe:2.3:a:cisco:cloud_portal:9.3:::::::*
	cpe:2.3:a:cisco:cloud_portal:9.3.1:::::::*
	cpe:2.3:a:cisco:cloud_portal:9.3.2:::::::*
	cpe:2.3:a:cisco:cloud_portal:9.4:::::::*

History

21 Nov 2024, 02:02

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 -~~	() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 -
References	~~() http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 -~~	() http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 -

Information

Published : 2014-03-14 10:55

Updated : 2024-11-21 02:02

NVD link : CVE-2014-0694

Mitre link : CVE-2014-0694

CVE.ORG link : CVE-2014-0694

JSON object : View

Products Affected

cisco

cloud_portal

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2014-0694", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-14T10:55:05.723", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33336", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33336", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818."}, {"lang": "es", "value": "Intelligent Automation para Cloud (IAC) en Cisco Cloud Portal 9.4.1 y anteriores incluye una clave criptogr\u00e1fica en archivos binarios, lo que facilita a atacantes remotos obtener datos en texto claro de una instalaci\u00f3n de IAC arbitraria mediante el aprovechamiento de esta clave, tambi\u00e9n conocido como Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814 y CSCui34818."}], "lastModified": "2024-11-21T02:02:39.877", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:cloud_portal:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26D4A390-4F2E-4978-B2EE-D69315C19D94", "versionEndIncluding": "9.4.1"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B42A12C4-FBA7-4A24-BD71-652DB9329766"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "257939F1-2806-48FC-A553-FBB8F974D041"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D064F97D-C82A-4834-B331-320FC769EBBF"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "687EF522-0EDA-4572-B41C-5BEC96B93948"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C79C4C7F-A148-41CB-A80F-285CAFD9599E"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D66F9DC-FDBB-471B-8453-5452A7C5D124"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB10A254-3C6F-45B5-BBE8-9970366CEE9E"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}