NVD

Id
35277  
Name
CVE-2014-8024  
Description
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-12-22  
Modified Date
2017-01-02  
Seq
2014-8024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180606 35277 CVE-2014-8024 20141222 Cisco Jabber Guest Server HTML5 cross-origin resource sharing  View
180607 35277 CVE-2014-8024 71770  View
180608 35277 CVE-2014-8024 1031422  View
180609 35277 CVE-2014-8024 20150106 Cisco Jabber Guest Server HTML5 Information Disclosure Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18488 JVNDB-2014-007363 Cisco Jabber Guest サーバの API における重要な情報を取得される脆弱性 Cisco Jabber Guest サーバの API には、HTML5 CORS 機能を使用する場合、重要な情報を取得される脆弱性が存在します。 CVE-2014-8024 75317 CVE-2014-8024 35277 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007363.html 2014-12-22 2014-12-24 View