CVE-2014-8024

EUVD-2014-7873
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
ciscojabber_guest
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8024
http://www.securityfocus.com/bid/71770
http://www.securitytracker.com/id/1031422
https://tools.cisco.com/security/center/viewAlert.x?alertId=36870
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8024
http://www.securityfocus.com/bid/71770
http://www.securitytracker.com/id/1031422
https://tools.cisco.com/security/center/viewAlert.x?alertId=36870