Lucene search
HistoryMay 26, 2014 - 12:25 a.m.
CVE-2014-3274
cisco
telepresence
cts
security
vulnerability
https
man-in-the-middle
attack
bug id
nvd
6.2 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
30.5%
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Affected configurations
Node
ciscotelepresence_system_softwareRange≤6.0.5\(5\)
ORciscotelepresence_system_softwareMatch1.2.3\(1101\)
ORciscotelepresence_system_softwareMatch1.3.2\(1393\)
ORciscotelepresence_system_softwareMatch1.4.7\(2229\)
ORciscotelepresence_system_softwareMatch1.5.1\(2082\)
ORciscotelepresence_system_softwareMatch1.5.3\(2115\)
ORciscotelepresence_system_softwareMatch1.5.10\(3648\)
ORciscotelepresence_system_softwareMatch1.5.11\(3659\)
ORciscotelepresence_system_softwareMatch1.5.12\(3701\)
ORciscotelepresence_system_softwareMatch1.5.13\(3717\)
ORciscotelepresence_system_softwareMatch1.6.0\(3954\)
ORciscotelepresence_system_softwareMatch1.6.2\(4023\)
ORciscotelepresence_system_softwareMatch1.6.3\(4042\)
ORciscotelepresence_system_softwareMatch1.6.4\(4072\)
ORciscotelepresence_system_softwareMatch1.6.5\(4097\)
ORciscotelepresence_system_softwareMatch1.6.6\(4109\)
ORciscotelepresence_system_softwareMatch1.6.7\(4212\)
ORciscotelepresence_system_softwareMatch1.6.8\(4222\)
ORciscotelepresence_system_softwareMatch1.7.0.1\(4764\)
ORciscotelepresence_system_softwareMatch1.7.0.2\(4719\)
ORciscotelepresence_system_softwareMatch1.7.1\(4864\)
ORciscotelepresence_system_softwareMatch1.7.2\(4937\)
ORciscotelepresence_system_softwareMatch1.7.2.1\(2\)
ORciscotelepresence_system_softwareMatch1.7.4\(270\)
ORciscotelepresence_system_softwareMatch1.7.5\(42\)
ORciscotelepresence_system_softwareMatch1.7.6\(4\)
ORciscotelepresence_system_softwareMatch1.8.0\(55\)
ORciscotelepresence_system_softwareMatch1.8.1\(34\)
ORciscotelepresence_system_softwareMatch1.8.2\(11\)
ORciscotelepresence_system_softwareMatch1.8.3\(4\)
ORciscotelepresence_system_softwareMatch1.8.4\(13\)
ORciscotelepresence_system_softwareMatch1.8.5\(4\)
ORciscotelepresence_system_softwareMatch1.9.0\(46\)
ORciscotelepresence_system_softwareMatch1.9.0.1\(3\)
ORciscotelepresence_system_softwareMatch1.9.1\(68\)
ORciscotelepresence_system_softwareMatch1.9.2
ORciscotelepresence_system_softwareMatch1.9.2\(19\)
ORciscotelepresence_system_softwareMatch1.9.3
ORciscotelepresence_system_softwareMatch1.9.3\(44\)
ORciscotelepresence_system_softwareMatch1.9.4
ORciscotelepresence_system_softwareMatch1.9.4\(19\)
ORciscotelepresence_system_softwareMatch1.9.5
ORciscotelepresence_system_softwareMatch1.9.5\(7\)
ORciscotelepresence_system_softwareMatch1.9.6
ORciscotelepresence_system_softwareMatch1.9.6\(2\)
ORciscotelepresence_system_softwareMatch1.9.6.1\(3\)
ORciscotelepresence_system_softwareMatch1.10.0
ORciscotelepresence_system_softwareMatch1.10.0\(259\)
ORciscotelepresence_system_softwareMatch1.10.1
ORciscotelepresence_system_softwareMatch1.10.1\(43\)
ORciscotelepresence_system_softwareMatch1.10.2\(42\)
ORciscotelepresence_system_softwareMatch1.10.3\(41\)
ORciscotelepresence_system_softwareMatch4.0.0
ORciscotelepresence_system_softwareMatch6.0.0.1\(4\)
ORciscotelepresence_system_softwareMatch6.0.1\(50\)
ORciscotelepresence_system_softwareMatch6.0.2\(28\)
ORciscotelepresence_system_softwareMatch6.0.3\(33\)
ORciscotelepresence_system_softwareMatch6.0.4\(11\)
Related
cisco
cisco
Cisco TelePresence System Directory Information Disclosure Vulnerability
2014-05-22 14:24:59
prion
prion
Design/Logic Flaw
2014-05-26 00:25:00
cvelist
cvelist
CVE-2014-3274
2014-05-23 22:00:00
nvd
nvd
CVE-2014-3274
2014-05-26 00:25:31
6.2 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
30.5%
Related for CVE-2014-3274