PT-2014-8380 · Cisco · Cisco Unified Computing System

Published 2014-12-10 · Updated 2015-01-24 · CVE-2014-8009

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System versions 2.1(3f) and earlier

Description The Management subsystem in Cisco Unified Computing System allows remote attackers to obtain sensitive information by reading log files.

Recommendations For versions 2.1(3f) and earlier, restrict access to log files to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-8009

Affected Products

Cisco Unified Computing System

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8009 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=36640 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8009 · Security Note