CVE-2014-0694

2014-03-1410:55:05

CWE-255

[email protected]

web.nvd.nist.gov

cisco

cloud portal

iac

cve-2014-0694

security

vulnerability

remote attack

cryptography

cleartext data

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

Affected configurations

NVD

Node

ciscocloud_portalRange≤9.4.1

ciscocloud_portalMatch9.1sp1

ciscocloud_portalMatch9.1sp2

ciscocloud_portalMatch9.1sp3

ciscocloud_portalMatch9.3

ciscocloud_portalMatch9.3.1

ciscocloud_portalMatch9.3.2

ciscocloud_portalMatch9.4

CPENameOperatorVersion
cisco:cloud_portalcisco cloud portalle9.4.1
cisco:cloud_portalcisco cloud portaleq9.1
cisco:cloud_portalcisco cloud portaleq9.3
cisco:cloud_portalcisco cloud portaleq9.3.1
cisco:cloud_portalcisco cloud portaleq9.3.2
cisco:cloud_portalcisco cloud portaleq9.4

CPE	Name	Operator	Version
cisco:cloud_portal	cisco cloud portal	le	9.4.1
cisco:cloud_portal	cisco cloud portal	eq	9.1
cisco:cloud_portal	cisco cloud portal	eq	9.3
cisco:cloud_portal	cisco cloud portal	eq	9.3.1
cisco:cloud_portal	cisco cloud portal	eq	9.3.2
cisco:cloud_portal	cisco cloud portal	eq	9.4