NVD

Id
31551  
Name
CVE-2014-3349  
Description
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-29  
Modified Date
2017-01-06  
Seq
2014-3349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165380 31551 CVE-2014-3349 20140828 Cisco Intelligent Automation for Cloud Arbitrary File Upload  View
165381 31551 CVE-2014-3349 69455  View
165382 31551 CVE-2014-3349 1030783  View
165383 31551 CVE-2014-3349 cisco-iac-cve20143349-file-upload(95586)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15116 JVNDB-2014-003991 Cisco Intelligent Automation for Cloud における任意のファイルをアップロードされる脆弱性 Cisco Intelligent Automation for Cloud (別名 Cisco Cloud Portal) は、ファイル送信の処理中にファイルタイプを検証しないため、任意のファイルをアップロードされる脆弱性が存在します。 CVE-2014-3349 70637 CVE-2014-3349 31551 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003991.html 2014-08-29 2014-09-01 View