Lucene search

K
nvd[email protected]NVD:CVE-2014-3298
HistoryJul 02, 2014 - 10:35 a.m.

CVE-2014-3298

2014-07-0210:35:25
CWE-255
web.nvd.nist.gov
5

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.002

Percentile

56.3%

Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.

Affected configurations

Nvd
Node
ciscocloud_portalMatch-
VendorProductVersionCPE
ciscocloud_portal-cpe:2.3:a:cisco:cloud_portal:-:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.002

Percentile

56.3%

Related for NVD:CVE-2014-3298