CVEvulnerability
CVE-2014-3333
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014.
Affected configurations
• cisco unity connection 9.1\(1\)
• cisco unity connection 9.1\(2\)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/59768 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35200 Vendor Advisory
- http://www.securityfocus.com/bid/69074 www.securityfocus.com
- http://www.securitytracker.com/id/1030688 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95135 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/59768 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3333 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35200 Vendor Advisory
- http://www.securityfocus.com/bid/69074 www.securityfocus.com
- http://www.securitytracker.com/id/1030688 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95135 exchange.xforce.ibmcloud.com