CVE-2014-0694

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
ciscocloud_portal
𝑥
≤ 9.4.1
ciscocloud_portal
9.1:sp1
ciscocloud_portal
9.1:sp2
ciscocloud_portal
9.1:sp3
ciscocloud_portal
9.3
ciscocloud_portal
9.3.1
ciscocloud_portal
9.3.2
ciscocloud_portal
9.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336