Cisco Prime Infrastructure CVE-2014-8007 Password Disclosure Vulnerability

Bugtraq ID:	71763
Class:	Design Error
CVE:	CVE-2014-8007
Remote:	Yes
Local:	No
Published:	Dec 19 2014 12:00AM
Updated:	Dec 24 2014 12:58AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Prime Infrastructure CVE-2014-8007 Password Disclosure Vulnerability

Cisco Prime Infrastructure is prone to a password-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.

This issue being tracked by Cisco Bug ID CSCum00019.

Cisco Prime Infrastructure CVE-2014-8007 Password Disclosure Vulnerability

An attacker can exploit this issue using browser or readily available tools.

Cisco Prime Infrastructure CVE-2014-8007 Password Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Prime Infrastructure CVE-2014-8007 Password Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )