VulnerabilityModified
CVE-2014-3272
The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.
MEDIUM 6.0EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.
- CVSS 2.0
- 6.0 MEDIUMAV:L/AC:H/Au:S/C:C/I:C/A:C
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/tidal enterprise scheduler
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/58922
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34339Vendor Advisory
- http://www.securitytracker.com/id/1030275Third Party Advisory, VDB Entry
- http://secunia.com/advisories/58922
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34339Vendor Advisory
- http://www.securitytracker.com/id/1030275Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.