CVEvulnerability
CVE-2014-3274
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Affected configurations
• cisco telepresence system software (<= 6.0.5\(5\))
• cisco telepresence system software 1.2.3\(1101\)
• cisco telepresence system software 1.3.2\(1393\)
• cisco telepresence system software 1.4.7\(2229\)
• cisco telepresence system software 1.5.1\(2082\)
• cisco telepresence system software 1.5.3\(2115\)
• cisco telepresence system software 1.5.10\(3648\)
• cisco telepresence system software 1.5.11\(3659\)
• cisco telepresence system software 1.5.12\(3701\)
• cisco telepresence system software 1.5.13\(3717\)
• cisco telepresence system software 1.6.0\(3954\)
• cisco telepresence system software 1.6.2\(4023\)
• cisco telepresence system software 1.6.3\(4042\)
• cisco telepresence system software 1.6.4\(4072\)
• cisco telepresence system software 1.6.5\(4097\)
• cisco telepresence system software 1.6.6\(4109\)
• cisco telepresence system software 1.6.7\(4212\)
• cisco telepresence system software 1.6.8\(4222\)
• cisco telepresence system software 1.7.0.1\(4764\)
• cisco telepresence system software 1.7.0.2\(4719\)
• cisco telepresence system software 1.7.1\(4864\)
• cisco telepresence system software 1.7.2\(4937\)
• cisco telepresence system software 1.7.2.1\(2\)
• cisco telepresence system software 1.7.4\(270\)
• cisco telepresence system software 1.7.5\(42\)
• cisco telepresence system software 1.7.6\(4\)
• cisco telepresence system software 1.8.0\(55\)
• cisco telepresence system software 1.8.1\(34\)
• cisco telepresence system software 1.8.2\(11\)
• cisco telepresence system software 1.8.3\(4\)
• cisco telepresence system software 1.8.4\(13\)
• cisco telepresence system software 1.8.5\(4\)
• cisco telepresence system software 1.9.0\(46\)
• cisco telepresence system software 1.9.0.1\(3\)
• cisco telepresence system software 1.9.1\(68\)
• cisco telepresence system software 1.9.2
• cisco telepresence system software 1.9.2\(19\)
• cisco telepresence system software 1.9.3
• cisco telepresence system software 1.9.3\(44\)
• cisco telepresence system software 1.9.4
• cisco telepresence system software 1.9.4\(19\)
• cisco telepresence system software 1.9.5
• cisco telepresence system software 1.9.5\(7\)
• cisco telepresence system software 1.9.6
• cisco telepresence system software 1.9.6\(2\)
• cisco telepresence system software 1.9.6.1\(3\)
• cisco telepresence system software 1.10.0
• cisco telepresence system software 1.10.0\(259\)
• cisco telepresence system software 1.10.1
• cisco telepresence system software 1.10.1\(43\)
• cisco telepresence system software 1.10.2\(42\)
• cisco telepresence system software 1.10.3\(41\)
• cisco telepresence system software 4.0.0
• cisco telepresence system software 6.0.0.1\(4\)
• cisco telepresence system software 6.0.1\(50\)
• cisco telepresence system software 6.0.2\(28\)
• cisco telepresence system software 6.0.3\(33\)
• cisco telepresence system software 6.0.4\(11\)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3274 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34327 Vendor Advisory
- http://www.securitytracker.com/id/1030272 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3274 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34327 Vendor Advisory
- http://www.securitytracker.com/id/1030272 Third Party Advisory, VDB Entry