CVE-2014-3297

Description

Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927.

References

http://www.securitytracker.com/id/1030510

http://www.securityfocus.com/bid/68308

http://tools.cisco.com/security/center/viewAlert.x?alertId=34834

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3297

http://secunia.com/advisories/59401

http://secunia.com/advisories/58985

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS