CVE-2014-3274
26.05.2014, 00:25
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | telepresence_system_software | 𝑥 ≤ 6.0.5\(5\) |
| cisco | telepresence_system_software | 1.2.3\(1101\) |
| cisco | telepresence_system_software | 1.3.2\(1393\) |
| cisco | telepresence_system_software | 1.4.7\(2229\) |
| cisco | telepresence_system_software | 1.5.1\(2082\) |
| cisco | telepresence_system_software | 1.5.3\(2115\) |
| cisco | telepresence_system_software | 1.5.10\(3648\) |
| cisco | telepresence_system_software | 1.5.11\(3659\) |
| cisco | telepresence_system_software | 1.5.12\(3701\) |
| cisco | telepresence_system_software | 1.5.13\(3717\) |
| cisco | telepresence_system_software | 1.6.0\(3954\) |
| cisco | telepresence_system_software | 1.6.2\(4023\) |
| cisco | telepresence_system_software | 1.6.3\(4042\) |
| cisco | telepresence_system_software | 1.6.4\(4072\) |
| cisco | telepresence_system_software | 1.6.5\(4097\) |
| cisco | telepresence_system_software | 1.6.6\(4109\) |
| cisco | telepresence_system_software | 1.6.7\(4212\) |
| cisco | telepresence_system_software | 1.6.8\(4222\) |
| cisco | telepresence_system_software | 1.7.0.1\(4764\) |
| cisco | telepresence_system_software | 1.7.0.2\(4719\) |
| cisco | telepresence_system_software | 1.7.1\(4864\) |
| cisco | telepresence_system_software | 1.7.2\(4937\) |
| cisco | telepresence_system_software | 1.7.2.1\(2\) |
| cisco | telepresence_system_software | 1.7.4\(270\) |
| cisco | telepresence_system_software | 1.7.5\(42\) |
| cisco | telepresence_system_software | 1.7.6\(4\) |
| cisco | telepresence_system_software | 1.8.0\(55\) |
| cisco | telepresence_system_software | 1.8.1\(34\) |
| cisco | telepresence_system_software | 1.8.2\(11\) |
| cisco | telepresence_system_software | 1.8.3\(4\) |
| cisco | telepresence_system_software | 1.8.4\(13\) |
| cisco | telepresence_system_software | 1.8.5\(4\) |
| cisco | telepresence_system_software | 1.9.0\(46\) |
| cisco | telepresence_system_software | 1.9.0.1\(3\) |
| cisco | telepresence_system_software | 1.9.1\(68\) |
| cisco | telepresence_system_software | 1.9.2 |
| cisco | telepresence_system_software | 1.9.2\(19\) |
| cisco | telepresence_system_software | 1.9.3 |
| cisco | telepresence_system_software | 1.9.3\(44\) |
| cisco | telepresence_system_software | 1.9.4 |
| cisco | telepresence_system_software | 1.9.4\(19\) |
| cisco | telepresence_system_software | 1.9.5 |
| cisco | telepresence_system_software | 1.9.5\(7\) |
| cisco | telepresence_system_software | 1.9.6 |
| cisco | telepresence_system_software | 1.9.6\(2\) |
| cisco | telepresence_system_software | 1.9.6.1\(3\) |
| cisco | telepresence_system_software | 1.10.0 |
| cisco | telepresence_system_software | 1.10.0\(259\) |
| cisco | telepresence_system_software | 1.10.1 |
| cisco | telepresence_system_software | 1.10.1\(43\) |
| cisco | telepresence_system_software | 1.10.2\(42\) |
| cisco | telepresence_system_software | 1.10.3\(41\) |
| cisco | telepresence_system_software | 4.0.0 |
| cisco | telepresence_system_software | 6.0.0.1\(4\) |
| cisco | telepresence_system_software | 6.0.1\(50\) |
| cisco | telepresence_system_software | 6.0.2\(28\) |
| cisco | telepresence_system_software | 6.0.3\(33\) |
| cisco | telepresence_system_software | 6.0.4\(11\) |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References