Lucene search
HistoryJan 22, 2014 - 5:22 a.m.
CVE-2014-0672
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
65.1%
The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.
Affected configurations
Node
ciscomediasenseMatch-
Related
cve
cve
CVE-2014-0672
2014-01-22 05:22:20
cisco
cisco
Cisco MediaSense Search and Play Authorization Vulnerability
2014-01-22 18:53:51
prion
prion
Design/Logic Flaw
2014-01-22 05:22:00
cvelist
cvelist
CVE-2014-0672
2014-01-22 02:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
65.1%
Related for NVD:CVE-2014-0672