PT-2014-3782 · Cisco · Cisco Cloud Portal

Published 2014-03-14 · Updated 2014-03-14 · CVE-2014-0694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Cloud Portal versions 9.4.1 and earlier

Description The issue allows remote attackers to obtain cleartext data from an arbitrary installation by leveraging knowledge of a cryptographic key included in binary files.

Recommendations For versions 9.4.1 and earlier, update to a version that does not include the cryptographic key in binary files to prevent remote attackers from obtaining cleartext data.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-0694

Affected Products

Cisco Cloud Portal

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-0694 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 · Note