4

CVE-2014-3297

Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Cloud Portal Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.78% 0.754
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/58985
http://secunia.com/advisories/59401
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34834
Vendor Advisory
http://www.securityfocus.com/bid/68308
http://www.securitytracker.com/id/1030510