CVEvulnerability

CVE-2014-3274

4.3 MEDIUM Published 2014-05-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-310

Description

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Affected configurations

• cisco telepresence system software (<= 6.0.5\(5\)) • cisco telepresence system software 1.2.3\(1101\) • cisco telepresence system software 1.3.2\(1393\) • cisco telepresence system software 1.4.7\(2229\) • cisco telepresence system software 1.5.1\(2082\) • cisco telepresence system software 1.5.3\(2115\) • cisco telepresence system software 1.5.10\(3648\) • cisco telepresence system software 1.5.11\(3659\) • cisco telepresence system software 1.5.12\(3701\) • cisco telepresence system software 1.5.13\(3717\) • cisco telepresence system software 1.6.0\(3954\) • cisco telepresence system software 1.6.2\(4023\) • cisco telepresence system software 1.6.3\(4042\) • cisco telepresence system software 1.6.4\(4072\) • cisco telepresence system software 1.6.5\(4097\) • cisco telepresence system software 1.6.6\(4109\) • cisco telepresence system software 1.6.7\(4212\) • cisco telepresence system software 1.6.8\(4222\) • cisco telepresence system software 1.7.0.1\(4764\) • cisco telepresence system software 1.7.0.2\(4719\) • cisco telepresence system software 1.7.1\(4864\) • cisco telepresence system software 1.7.2\(4937\) • cisco telepresence system software 1.7.2.1\(2\) • cisco telepresence system software 1.7.4\(270\) • cisco telepresence system software 1.7.5\(42\) • cisco telepresence system software 1.7.6\(4\) • cisco telepresence system software 1.8.0\(55\) • cisco telepresence system software 1.8.1\(34\) • cisco telepresence system software 1.8.2\(11\) • cisco telepresence system software 1.8.3\(4\) • cisco telepresence system software 1.8.4\(13\) • cisco telepresence system software 1.8.5\(4\) • cisco telepresence system software 1.9.0\(46\) • cisco telepresence system software 1.9.0.1\(3\) • cisco telepresence system software 1.9.1\(68\) • cisco telepresence system software 1.9.2 • cisco telepresence system software 1.9.2\(19\) • cisco telepresence system software 1.9.3 • cisco telepresence system software 1.9.3\(44\) • cisco telepresence system software 1.9.4 • cisco telepresence system software 1.9.4\(19\) • cisco telepresence system software 1.9.5 • cisco telepresence system software 1.9.5\(7\) • cisco telepresence system software 1.9.6 • cisco telepresence system software 1.9.6\(2\) • cisco telepresence system software 1.9.6.1\(3\) • cisco telepresence system software 1.10.0 • cisco telepresence system software 1.10.0\(259\) • cisco telepresence system software 1.10.1 • cisco telepresence system software 1.10.1\(43\) • cisco telepresence system software 1.10.2\(42\) • cisco telepresence system software 1.10.3\(41\) • cisco telepresence system software 4.0.0 • cisco telepresence system software 6.0.0.1\(4\) • cisco telepresence system software 6.0.1\(50\) • cisco telepresence system software 6.0.2\(28\) • cisco telepresence system software 6.0.3\(33\) • cisco telepresence system software 6.0.4\(11\)

Related

Weakness · not in database (1)

References