CVE

Id
68081  
CVE No.
CVE-2014-0672  
Status
Candidate  
Description
The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.  
Phase
Assigned (20140102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
657383 68081 CVE-2014-0672 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=32516  View
657384 68081 CVE-2014-0672 CISCO:20140121 Cisco MediaSense Search and Play Authorization Vulnerability  View
657385 68081 CVE-2014-0672 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0672  View
657386 68081 CVE-2014-0672 BID:65054  View
657387 68081 CVE-2014-0672 URL:http://www.securityfocus.com/bid/65054  View
657388 68081 CVE-2014-0672 OSVDB:102342  View
657389 68081 CVE-2014-0672 URL:http://osvdb.org/102342  View
657390 68081 CVE-2014-0672 SECTRACK:1029668  View
657391 68081 CVE-2014-0672 URL:http://www.securitytracker.com/id/1029668  View
657392 68081 CVE-2014-0672 SECUNIA:56600  View
657393 68081 CVE-2014-0672 URL:http://secunia.com/advisories/56600  View
657394 68081 CVE-2014-0672 XF:cisco-mediasense-cve20140672-info-disc(90616)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12404 JVNDB-2014-001279 Cisco Identity Services Engine の NAC Web Agent コンポーネントにおけるクロスサイトスクリプティングの脆弱性 Cisco Identity Services Engine (ISE) の NAC Web Agent コンポーネントの HTTP 制御インターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-0680 68081 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001279.html  View