Unscored CVE-2014-3352 EUVD-2014-3365GHSA-w3pj-wh46-55mh

Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a pr…

Published Aug 30, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.

References

cisco-iac-cve20143352-info-disc(95605) vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=35479
69458 vdb-entry
20140828 Cisco Intelligent Automation for Cloud iFrame Vulnerability vendor-advisory
60956 third-party-advisory
1030785 vdb-entry