CVEvulnerability
CVE-2014-3349
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.
Affected configurations
• cisco cloud portal
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349 Vendor Advisory
- http://www.securityfocus.com/bid/69455 www.securityfocus.com
- http://www.securitytracker.com/id/1030783 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95586 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349 Vendor Advisory
- http://www.securityfocus.com/bid/69455 www.securityfocus.com
- http://www.securitytracker.com/id/1030783 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95586 exchange.xforce.ibmcloud.com