Cisco Cloud Portal Form Data Viewer Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	68309
Class:	Design Error
CVE:	CVE-2014-3298
Remote:	Yes
Local:	No
Published:	Jul 01 2014 12:00AM
Updated:	Jul 01 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Cisco Cloud Portal Form Data Viewer Multiple Information Disclosure Vulnerabilities

Cisco Cloud Portal is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to passwords that may aid in further attacks.

These issues are being tracked by Cisco BugId CSCui36976.

Cisco Cloud Portal Form Data Viewer Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues using browser or readily available tools.

Cisco Cloud Portal Form Data Viewer Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Cloud Portal Form Data Viewer Multiple Information Disclosure Vulnerabilities

References:

• Cisco Homepage (Cisco )