NVD

Id
31610  
Name
CVE-2014-3410  
Description
The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then (1) sniffing the network for a syslog message or (2) reading a syslog message in a file on a syslog server, aka Bug IDs CSCuq22357 and CSCur41860.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-12-19  
Modified Date
2014-12-22  
Seq
2014-3410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165571 31610 CVE-2014-3410 20141219 Cisco ASA Information Leak in Syslog Messages Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18495 JVNDB-2014-007370 Cisco Adaptive Security Appliance ソフトウェアの syslog-management サブシステムにおける管理者パスワードを取得される脆弱性 Cisco Adaptive Security Appliance (ASA) ソフトウェアの syslog-management サブシステムには、管理者パスワードを取得される脆弱性が存在します。 CVE-2014-3410 70698 CVE-2014-3410 31610 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007370.html 2014-12-23 2014-12-24 View