PT-2014-3782 · Cisco · Cisco Cloud Portal

Publicado 2014-03-14 · Atualizado 2014-03-14 · CVE-2014-0694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Cloud Portal versions 9.4.1 and earlier

Description The issue allows remote attackers to obtain cleartext data from an arbitrary installation by leveraging knowledge of a cryptographic key included in binary files.

Recommendations For versions 9.4.1 and earlier, update to a version that does not include the cryptographic key in binary files to prevent remote attackers from obtaining cleartext data.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-0694

Produtos afetados

Cisco Cloud Portal

Referências · 3

• http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0694 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 · Aviso do Fabricante