CVEvulnerability
CVE-2014-3272
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:L/AC:H/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.
Affected configurations
• cisco tidal enterprise scheduler (<= 6.1)
• cisco tidal enterprise scheduler 3.0.0
• cisco tidal enterprise scheduler 3.0.1
• cisco tidal enterprise scheduler 5.2.2
• cisco tidal enterprise scheduler 5.3.0
• cisco tidal enterprise scheduler 5.3.1
• cisco tidal enterprise scheduler 6.0.0
• cisco tidal enterprise scheduler 6.0.1
• cisco tidal enterprise scheduler 6.0.2
• cisco tidal enterprise scheduler 6.0.3
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/58922 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 Vendor Advisory
- http://www.securitytracker.com/id/1030275 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/58922 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 Vendor Advisory
- http://www.securitytracker.com/id/1030275 Third Party Advisory, VDB Entry