Cisco TelePresence System HTTPS Communication Information Disclosure Vulnerability

Bugtraq ID:	67558
Class:	Design Error
CVE:	CVE-2014-3274
Remote:	Yes
Local:	No
Published:	May 21 2014 12:00AM
Updated:	May 21 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco TelePresence System HTTPS Communication Information Disclosure Vulnerability

Cisco TelePresence System is prone to a remote information-disclosure vulnerability.

An attacker can leverage this issue to obtain sensitive information. This may result in further attacks.

This issue is tracked by Cisco Bug ID CSCuj26326.

Cisco TelePresence System HTTPS Communication Information Disclosure Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco TelePresence System HTTPS Communication Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco TelePresence System HTTPS Communication Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )