VulnerabilityModified
CVE-2014-3298
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.
MEDIUM 4.0EPSS 1.64%
Does this matter?
Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.
Description
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- cisco/cloud portal
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/58985
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34833Vendor Advisory
- http://www.securityfocus.com/bid/68309
- http://www.securitytracker.com/id/1030511
- http://secunia.com/advisories/58985
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3298Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34833Vendor Advisory
- http://www.securityfocus.com/bid/68309
- http://www.securitytracker.com/id/1030511
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.