CVE-2014-3352

State: Published
Severity: Not scored
Published: Aug 30, 2014
Updated: Aug 6, 2024
Reserved: May 7, 2014

Description

Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

cisco-iac-cve20143352-info-disc(95605)vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=35479
69458vdb-entry
20140828 Cisco Intelligent Automation for Cloud iFrame Vulnerabilityvendor-advisory
60956third-party-advisory
1030785vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.