Cisco Cloud Portal CVE-2014-3297 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	68308
Class:	Design Error
CVE:	CVE-2014-3297
Remote:	Yes
Local:	No
Published:	Jul 01 2014 12:00AM
Updated:	Jul 08 2014 07:47AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Cisco Cloud Portal CVE-2014-3297 Multiple Information Disclosure Vulnerabilities

Cisco Cloud Portal is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information that may aid in further attacks.

These issues is being tracked by Cisco BugIds CSCui36937, CSCui37004 and CSCui36927.

Cisco Cloud Portal CVE-2014-3297 Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues using browser or readily available tools.

Cisco Cloud Portal CVE-2014-3297 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Cloud Portal CVE-2014-3297 Multiple Information Disclosure Vulnerabilities

References:

• Cisco Homepage (Cisco )