CVE-2014-3298

EUVD-2014-3311
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
ciscocloud_portal
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/58985
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298
http://tools.cisco.com/security/center/viewAlert.x?alertId=34833
http://www.securityfocus.com/bid/68309
http://www.securitytracker.com/id/1030511
http://secunia.com/advisories/58985
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298
http://tools.cisco.com/security/center/viewAlert.x?alertId=34833
http://www.securityfocus.com/bid/68309
http://www.securitytracker.com/id/1030511