CVE-2014-0694

Published: Mar 14, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

Affected (8)

Products: Cisco: Cloud Portal

Cisco

1 product

Cloud Portal

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cisco Cloud Portal	Up to 9.4.1
Cisco Cloud Portal	Version 9.1 sp1
Cisco Cloud Portal	Version 9.1 sp2
Cisco Cloud Portal	Version 9.1 sp3
Cisco Cloud Portal	Version 9.3.1
Cisco Cloud Portal	Version 9.3.2
Cisco Cloud Portal	Version 9.3
Cisco Cloud Portal	Version 9.4

Related CWEs

CWE-255

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=33336

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/viewAlert.x?alertId=33336

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.