CVE-2014-2227

The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file.

CVSS v2.0 6.0 MEDIUM

6.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 6.8 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://seclists.org/fulldisclosure/2014/Jul/128	Exploit
http://sethsec.blogspot.com/2014/07/cve-2014-2227.html	Exploit
http://www.securityfocus.com/bid/68866	Exploit
http://seclists.org/fulldisclosure/2014/Jul/128	Exploit
http://sethsec.blogspot.com/2014/07/cve-2014-2227.html	Exploit
http://www.securityfocus.com/bid/68866	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:ui:unifi_video:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:05

Type	Values Removed	Values Added
References	~~() http://seclists.org/fulldisclosure/2014/Jul/128 - Exploit~~	() http://seclists.org/fulldisclosure/2014/Jul/128 - Exploit
References	~~() http://sethsec.blogspot.com/2014/07/cve-2014-2227.html - Exploit~~	() http://sethsec.blogspot.com/2014/07/cve-2014-2227.html - Exploit
References	~~() http://www.securityfocus.com/bid/68866 - Exploit~~	() http://www.securityfocus.com/bid/68866 - Exploit

Information

Published : 2014-07-25 19:55

Updated : 2024-11-21 02:05

NVD link : CVE-2014-2227

Mitre link : CVE-2014-2227

CVE.ORG link : CVE-2014-2227

JSON object : View

Products Affected

ui

unifi_video

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2014-2227", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-07-25T19:55:03.847", "references": [{"url": "http://seclists.org/fulldisclosure/2014/Jul/128", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://sethsec.blogspot.com/2014/07/cve-2014-2227.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/68866", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2014/Jul/128", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sethsec.blogspot.com/2014/07/cve-2014-2227.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/68866", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file."}, {"lang": "es", "value": "La pol\u00edtica de cruce de dominio Flash por defecto (crossdomain.xml) en Ubiquiti Networks UniFi Video (anteriormente AirVision tambi\u00e9n conocido como AirVision Controller) anterior a 3.0.1 no restringe el acceso a la aplicaci\u00f3n, lo que permite a atacantes remotos evadir Same Origin Policy a trav\u00e9s de un fichero SWF manipulado."}], "lastModified": "2024-11-21T02:05:52.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ui:unifi_video:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1D5709F-E814-4639-92A8-0CB6411F661A", "versionEndIncluding": "2.1.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}