CVE-2014-0694

EUVD-2014-0725
Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
ciscocloud_portal
𝑥
≤ 9.4.1
ciscocloud_portal
9.1:sp1
ciscocloud_portal
9.1:sp2
ciscocloud_portal
9.1:sp3
ciscocloud_portal
9.3
ciscocloud_portal
9.3.1
ciscocloud_portal
9.3.2
ciscocloud_portal
9.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694
http://tools.cisco.com/security/center/viewAlert.x?alertId=33336