CVE Vulnerabilities

CVE-2014-3274

Published: May 26, 2014 | Modified: Sep 07, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

Affected Software

Name Vendor Start Version End Version
Telepresence_system_software Cisco * 6.0.5(5) (including)
Telepresence_system_software Cisco 1.2.3(1101) (including) 1.2.3(1101) (including)
Telepresence_system_software Cisco 1.3.2(1393) (including) 1.3.2(1393) (including)
Telepresence_system_software Cisco 1.4.7(2229) (including) 1.4.7(2229) (including)
Telepresence_system_software Cisco 1.5.1(2082) (including) 1.5.1(2082) (including)
Telepresence_system_software Cisco 1.5.3(2115) (including) 1.5.3(2115) (including)
Telepresence_system_software Cisco 1.5.10(3648) (including) 1.5.10(3648) (including)
Telepresence_system_software Cisco 1.5.11(3659) (including) 1.5.11(3659) (including)
Telepresence_system_software Cisco 1.5.12(3701) (including) 1.5.12(3701) (including)
Telepresence_system_software Cisco 1.5.13(3717) (including) 1.5.13(3717) (including)
Telepresence_system_software Cisco 1.6.0(3954) (including) 1.6.0(3954) (including)
Telepresence_system_software Cisco 1.6.2(4023) (including) 1.6.2(4023) (including)
Telepresence_system_software Cisco 1.6.3(4042) (including) 1.6.3(4042) (including)
Telepresence_system_software Cisco 1.6.4(4072) (including) 1.6.4(4072) (including)
Telepresence_system_software Cisco 1.6.5(4097) (including) 1.6.5(4097) (including)
Telepresence_system_software Cisco 1.6.6(4109) (including) 1.6.6(4109) (including)
Telepresence_system_software Cisco 1.6.7(4212) (including) 1.6.7(4212) (including)
Telepresence_system_software Cisco 1.6.8(4222) (including) 1.6.8(4222) (including)
Telepresence_system_software Cisco 1.7.0.1(4764) (including) 1.7.0.1(4764) (including)
Telepresence_system_software Cisco 1.7.0.2(4719) (including) 1.7.0.2(4719) (including)
Telepresence_system_software Cisco 1.7.1(4864) (including) 1.7.1(4864) (including)
Telepresence_system_software Cisco 1.7.2(4937) (including) 1.7.2(4937) (including)
Telepresence_system_software Cisco 1.7.2.1(2) (including) 1.7.2.1(2) (including)
Telepresence_system_software Cisco 1.7.4(270) (including) 1.7.4(270) (including)
Telepresence_system_software Cisco 1.7.5(42) (including) 1.7.5(42) (including)
Telepresence_system_software Cisco 1.7.6(4) (including) 1.7.6(4) (including)
Telepresence_system_software Cisco 1.8.0(55) (including) 1.8.0(55) (including)
Telepresence_system_software Cisco 1.8.1(34) (including) 1.8.1(34) (including)
Telepresence_system_software Cisco 1.8.2(11) (including) 1.8.2(11) (including)
Telepresence_system_software Cisco 1.8.3(4) (including) 1.8.3(4) (including)
Telepresence_system_software Cisco 1.8.4(13) (including) 1.8.4(13) (including)
Telepresence_system_software Cisco 1.8.5(4) (including) 1.8.5(4) (including)
Telepresence_system_software Cisco 1.9.0(46) (including) 1.9.0(46) (including)
Telepresence_system_software Cisco 1.9.0.1(3) (including) 1.9.0.1(3) (including)
Telepresence_system_software Cisco 1.9.1(68) (including) 1.9.1(68) (including)
Telepresence_system_software Cisco 1.9.2 (including) 1.9.2 (including)
Telepresence_system_software Cisco 1.9.2(19) (including) 1.9.2(19) (including)
Telepresence_system_software Cisco 1.9.3 (including) 1.9.3 (including)
Telepresence_system_software Cisco 1.9.3(44) (including) 1.9.3(44) (including)
Telepresence_system_software Cisco 1.9.4 (including) 1.9.4 (including)
Telepresence_system_software Cisco 1.9.4(19) (including) 1.9.4(19) (including)
Telepresence_system_software Cisco 1.9.5 (including) 1.9.5 (including)
Telepresence_system_software Cisco 1.9.5(7) (including) 1.9.5(7) (including)
Telepresence_system_software Cisco 1.9.6 (including) 1.9.6 (including)
Telepresence_system_software Cisco 1.9.6(2) (including) 1.9.6(2) (including)
Telepresence_system_software Cisco 1.9.6.1(3) (including) 1.9.6.1(3) (including)
Telepresence_system_software Cisco 1.10.0 (including) 1.10.0 (including)
Telepresence_system_software Cisco 1.10.0(259) (including) 1.10.0(259) (including)
Telepresence_system_software Cisco 1.10.1 (including) 1.10.1 (including)
Telepresence_system_software Cisco 1.10.1(43) (including) 1.10.1(43) (including)
Telepresence_system_software Cisco 1.10.2(42) (including) 1.10.2(42) (including)
Telepresence_system_software Cisco 1.10.3(41) (including) 1.10.3(41) (including)
Telepresence_system_software Cisco 4.0.0 (including) 4.0.0 (including)
Telepresence_system_software Cisco 6.0.0.1(4) (including) 6.0.0.1(4) (including)
Telepresence_system_software Cisco 6.0.1(50) (including) 6.0.1(50) (including)
Telepresence_system_software Cisco 6.0.2(28) (including) 6.0.2(28) (including)
Telepresence_system_software Cisco 6.0.3(33) (including) 6.0.3(33) (including)
Telepresence_system_software Cisco 6.0.4(11) (including) 6.0.4(11) (including)

References