CVE

Id
70648  
CVE No.
CVE-2014-3352  
Status
Candidate  
Description
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671624 70648 CVE-2014-3352 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35479  View
671625 70648 CVE-2014-3352 CISCO:20140828 Cisco Intelligent Automation for Cloud iFrame Vulnerability  View
671626 70648 CVE-2014-3352 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3352  View
671627 70648 CVE-2014-3352 BID:69458  View
671628 70648 CVE-2014-3352 URL:http://www.securityfocus.com/bid/69458  View
671629 70648 CVE-2014-3352 SECTRACK:1030785  View
671630 70648 CVE-2014-3352 URL:http://www.securitytracker.com/id/1030785  View
671631 70648 CVE-2014-3352 SECUNIA:60956  View
671632 70648 CVE-2014-3352 URL:http://secunia.com/advisories/60956  View
671633 70648 CVE-2014-3352 XF:cisco-iac-cve20143352-info-disc(95605)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15531 JVNDB-2014-004406 Cisco IOS および IOS XE におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS および IOS XE には、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。 CVE-2014-3360 70648 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004406.html  View