CVE-2014-3274
Summary
| CVE | CVE-2014-3274 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-05-26 00:25:00 UTC |
| Updated | 2016-09-07 17:04:00 UTC |
| Description | Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326. |
Risk And Classification
Problem Types: CWE-310
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Telepresence System Software | 1.10.0 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0(259) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0\(259\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1(43) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1\(43\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.2(42) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.2\(42\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.3(41) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.3\(41\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.2.3(1101) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.2.3\(1101\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.3.2(1393) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.3.2\(1393\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.4.7(2229) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.4.7\(2229\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.1(2082) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.10(3648) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.10\(3648\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.11(3659) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.11\(3659\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.12(3701) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.12\(3701\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.13(3717) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.13\(3717\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.1\(2082\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.3(2115) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.3\(2115\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.0(3954) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.0\(3954\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.2(4023) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.2\(4023\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.3(4042) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.3\(4042\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.4(4072) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.4\(4072\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.5(4097) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.5\(4097\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.6(4109) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.6\(4109\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.7(4212) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.7\(4212\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.8(4222) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.8\(4222\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.1(4764) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.1\(4764\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.2(4719) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.2\(4719\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.1(4864) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.1\(4864\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2(4937) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2.1(2) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2.1\(2\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2\(4937\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.4(270) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.4\(270\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.5(42) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.5\(42\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.6(4) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.6\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.0(55) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.0\(55\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.1(34) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.1\(34\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.2(11) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.2\(11\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.3(4) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.3\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.4(13) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.4\(13\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.5(4) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.5\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0(46) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0.1(3) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0.1\(3\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0\(46\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.1(68) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.1\(68\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2(19) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3(44) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3\(44\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4(19) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5(7) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5\(7\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6(2) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6.1(3) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6.1\(3\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6\(2\) | All | All | All |
| Application | Cisco | Telepresence System Software | 4.0.0 | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.0.1(4) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.0.1\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.1(50) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.1\(50\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.2(28) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.2\(28\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.3(33) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.3\(33\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.4(11) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.4\(11\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.0\(259\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.1\(43\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.2\(42\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.10.3\(41\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.2.3\(1101\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.3.2\(1393\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.4.7\(2229\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.10\(3648\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.11\(3659\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.12\(3701\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.13\(3717\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.1\(2082\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.5.3\(2115\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.0\(3954\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.2\(4023\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.3\(4042\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.4\(4072\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.5\(4097\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.6\(4109\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.7\(4212\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.6.8\(4222\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.1\(4764\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.0.2\(4719\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.1\(4864\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2.1\(2\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.2\(4937\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.4\(270\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.5\(42\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.7.6\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.0\(55\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.1\(34\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.2\(11\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.3\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.4\(13\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.8.5\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0.1\(3\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.0\(46\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.1\(68\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.2\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.3\(44\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.4\(19\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.5\(7\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6 | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6.1\(3\) | All | All | All |
| Application | Cisco | Telepresence System Software | 1.9.6\(2\) | All | All | All |
| Application | Cisco | Telepresence System Software | 4.0.0 | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.0.1\(4\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.1\(50\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.2\(28\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.3\(33\) | All | All | All |
| Application | Cisco | Telepresence System Software | 6.0.4\(11\) | All | All | All |
| Application | Cisco | Telepresence System Software | All | All | All | All |
| Application | Cisco | Telepresence System Software | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Alert Details - Security Center - Cisco Systems | CONFIRM | tools.cisco.com | Vendor Advisory |
| Cisco TelePresence Does Not Always Encrypt Directory Information Transfers - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Cisco Security Notice: Cisco TelePresence System Directory Information Disclosure Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.