CVE-2014-0694

{"id": "CVE-2014-0694", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-14T10:55:05.723", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33336", "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818."}, {"lang": "es", "value": "Intelligent Automation para Cloud (IAC) en Cisco Cloud Portal 9.4.1 y anteriores incluye una clave criptogr\u00e1fica en archivos binarios, lo que facilita a atacantes remotos obtener datos en texto claro de una instalaci\u00f3n de IAC arbitraria mediante el aprovechamiento de esta clave, tambi\u00e9n conocido como Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814 y CSCui34818."}], "lastModified": "2014-03-14T17:56:47.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:cloud_portal:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26D4A390-4F2E-4978-B2EE-D69315C19D94", "versionEndIncluding": "9.4.1"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B42A12C4-FBA7-4A24-BD71-652DB9329766"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "257939F1-2806-48FC-A553-FBB8F974D041"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D064F97D-C82A-4834-B331-320FC769EBBF"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "687EF522-0EDA-4572-B41C-5BEC96B93948"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C79C4C7F-A148-41CB-A80F-285CAFD9599E"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D66F9DC-FDBB-471B-8453-5452A7C5D124"}, {"criteria": "cpe:2.3:a:cisco:cloud_portal:9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB10A254-3C6F-45B5-BBE8-9970366CEE9E"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}