CVE-2014-0694
Summary
| CVE | CVE-2014-0694 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-03-14 10:55:00 UTC |
| Updated | 2014-03-14 17:56:00 UTC |
| Description | Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818. |
Risk And Classification
Problem Types: CWE-255
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Cloud Portal | 9.1 | sp1 | All | All |
| Application | Cisco | Cloud Portal | 9.1 | sp2 | All | All |
| Application | Cisco | Cloud Portal | 9.1 | sp3 | All | All |
| Application | Cisco | Cloud Portal | 9.3 | All | All | All |
| Application | Cisco | Cloud Portal | 9.3.1 | All | All | All |
| Application | Cisco | Cloud Portal | 9.3.2 | All | All | All |
| Application | Cisco | Cloud Portal | 9.4 | All | All | All |
| Application | Cisco | Cloud Portal | 9.1 | sp1 | All | All |
| Application | Cisco | Cloud Portal | 9.1 | sp2 | All | All |
| Application | Cisco | Cloud Portal | 9.1 | sp3 | All | All |
| Application | Cisco | Cloud Portal | 9.3 | All | All | All |
| Application | Cisco | Cloud Portal | 9.3.1 | All | All | All |
| Application | Cisco | Cloud Portal | 9.3.2 | All | All | All |
| Application | Cisco | Cloud Portal | 9.4 | All | All | All |
| Application | Cisco | Cloud Portal | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 20140312 Cisco Intelligent Automation for Cloud Cryptographic Implementation Issues | CISCO | tools.cisco.com | |
| tools.cisco.com/security/center/viewAlert.x | CONFIRM | tools.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.