CVEvulnerability
CVE-2014-3297
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927.
Affected configurations
• cisco cloud portal
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/58985 secunia.com
- http://secunia.com/advisories/59401 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34834 Vendor Advisory
- http://www.securityfocus.com/bid/68308 www.securityfocus.com
- http://www.securitytracker.com/id/1030510 www.securitytracker.com
- http://secunia.com/advisories/58985 secunia.com
- http://secunia.com/advisories/59401 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34834 Vendor Advisory
- http://www.securityfocus.com/bid/68308 www.securityfocus.com
- http://www.securitytracker.com/id/1030510 www.securitytracker.com