CVEvulnerability
CVE-2014-0694
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.
Affected configurations
• cisco cloud portal (<= 9.4.1)
• cisco cloud portal 9.1
• cisco cloud portal 9.3
• cisco cloud portal 9.3.1
• cisco cloud portal 9.3.2
• cisco cloud portal 9.4
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 tools.cisco.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 tools.cisco.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 tools.cisco.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 tools.cisco.com