NVD

Id
31536  
Name
CVE-2014-3333  
Description
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-11  
Modified Date
2017-01-06  
Seq
2014-3333  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165304 31536 CVE-2014-3333 59768  View
165305 31536 CVE-2014-3333 20140806 Cisco Unity Connection HTTP Intercept Vulnerability  View
165306 31536 CVE-2014-3333 http://tools.cisco.com/security/center/viewAlert.x?alertId=35200  View
165307 31536 CVE-2014-3333 69074  View
165308 31536 CVE-2014-3333 1030688  View
165309 31536 CVE-2014-3333 cisco-unity-cve20143333-priv-esc(95135)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14861 JVNDB-2014-003736 Cisco Unity Connection のサーバにおける特権的アクセス権を取得される脆弱性 Cisco Unity Connection のサーバには、特権的アクセス権を取得される脆弱性が存在します。 CVE-2014-3333 70621 CVE-2014-3333 31536 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003736.html 2014-08-07 2014-08-13 View