Details of VAR-201404-0562

ID

VAR-201404-0562

CVE

CVE-2014-2184

TITLE

Cisco Unified Communications Manager of IP Manager Assistant Vulnerabilities that can capture important information in components

Trust: 0.8

sources: JVNDB: JVNDB-2014-002267

DESCRIPTION

The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352. Vendors have confirmed this vulnerability Bug ID CSCun74352 It is released as.Skillfully crafted by a third party URL You may get important information through. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. This issue is being tracked by Cisco BugId CSCun74352. IP Manager Assistant (IPMA) is one of the PC-based network management applications, also known as network assistant, which is mainly used to simplify network configuration, deployment, and daily management and maintenance

Trust: 1.98

sources: NVD: CVE-2014-2184 // JVNDB: JVNDB-2014-002267 // BID: 67101 // VULHUB: VHN-70123

AFFECTED PRODUCTS

vendor:	cisco	model:	unified communications manager	scope:	eq	version:	*	Trust: 1.0
vendor:	cisco	model:	unified communications manager	scope:	eq	version:	10.0(1)	Trust: 0.8
vendor:	cisco	model:	unified communications manager	scope:	-	version:	-	Trust: 0.6

sources: JVNDB: JVNDB-2014-002267 // CNNVD: CNNVD-201404-568 // NVD: CVE-2014-2184

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-2184
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2014-2184
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201404-568
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-70123
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-2184
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-70123
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-70123 // JVNDB: JVNDB-2014-002267 // CNNVD: CNNVD-201404-568 // NVD: CVE-2014-2184

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-70123 // JVNDB: JVNDB-2014-002267 // NVD: CVE-2014-2184

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201404-568

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201404-568

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-002267

PATCH

title:	Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2184	Trust: 0.8
title:	33988	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=33988	Trust: 0.8

sources: JVNDB: JVNDB-2014-002267

EXTERNAL IDS

db:	NVD	id:	CVE-2014-2184	Trust: 2.8
db:	JVNDB	id:	JVNDB-2014-002267	Trust: 0.8
db:	CNNVD	id:	CNNVD-201404-568	Trust: 0.7
db:	CISCO	id:	20140428 CISCO UNIFIED COMMUNICATIONS MANAGER SENSITIVE INFORMATION DISCLOSURE VULNERABILITY	Trust: 0.6
db:	BID	id:	67101	Trust: 0.4
db:	VULHUB	id:	VHN-70123	Trust: 0.1

sources: VULHUB: VHN-70123 // BID: 67101 // JVNDB: JVNDB-2014-002267 // CNNVD: CNNVD-201404-568 // NVD: CVE-2014-2184

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-2184	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2184	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2184	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3
url:	http://www.cisco.com/en/us/products/ps7060/index.html	Trust: 0.3

sources: VULHUB: VHN-70123 // BID: 67101 // JVNDB: JVNDB-2014-002267 // CNNVD: CNNVD-201404-568 // NVD: CVE-2014-2184

CREDITS

Cisco

Trust: 0.3

sources: BID: 67101

SOURCES

db:	VULHUB	id:	VHN-70123
db:	BID	id:	67101
db:	JVNDB	id:	JVNDB-2014-002267
db:	CNNVD	id:	CNNVD-201404-568
db:	NVD	id:	CVE-2014-2184

LAST UPDATE DATE

2024-11-23T22:08:21.098000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-70123	date:	2014-04-29T00:00:00
db:	BID	id:	67101	date:	2014-05-02T00:50:00
db:	JVNDB	id:	JVNDB-2014-002267	date:	2014-04-30T00:00:00
db:	CNNVD	id:	CNNVD-201404-568	date:	2014-04-30T00:00:00
db:	NVD	id:	CVE-2014-2184	date:	2024-11-21T02:05:48.783

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-70123	date:	2014-04-29T00:00:00
db:	BID	id:	67101	date:	2014-04-28T00:00:00
db:	JVNDB	id:	JVNDB-2014-002267	date:	2014-04-30T00:00:00
db:	CNNVD	id:	CNNVD-201404-568	date:	2014-04-30T00:00:00
db:	NVD	id:	CVE-2014-2184	date:	2014-04-29T10:37:04.047