Description
Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.
References
- cisco-vsom-cve20140674-unauth-access(90651) vdb-entry
- 20140123 Cisco Video Surveillance Operations Manager MySQL Database Insufficient Authentication Controls vendor-advisory
- 102409 vdb-entry
- 65111 vdb-entry
- USN-2739-1 vendor-advisory
- 1029692 vdb-entry
- 56619 third-party-advisory