CVE-2014-8009
published 2014-12-10CVE-2014-8009: The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files…
PriorityP421medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.17%
64.0th percentile
The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_computing_system | <= 2.1\(3f\) | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified Computing System Manager Information Disclosure Vulnerability
vendor_cisco·2014-12-08·CVSS 5.0
CVE-2014-8009 [MEDIUM] CWE-200 Cisco Unified Computing System Manager Information Disclosure Vulnerability
Cisco Unified Computing System Manager Information Disclosure Vulnerability
A vulnerability in the system logs of the Cisco Unified Computing System Manager could allow an unauthenticated, remote attacker to view sensitive system information.
The vulnerability is due to the inclusion of sensitive information in certain log files. An attacker could exploit this vulnerability by viewing the sensitive information stored in the logs.
Cisco has confirmed the vulnerability and released software updates.
To exploit the vulnerability, the attacker may need access to trusted or internal networks to access system log files. This access requirement could limit the likelihood of a successful exploit.
GHSA
GHSA-qjhp-7w3m-hgv6: The Management subsystem in Cisco Unified Computing System 2
ghsa_unreviewed·2022-05-17
CVE-2014-8009 [MEDIUM] CWE-200 GHSA-qjhp-7w3m-hgv6: The Management subsystem in Cisco Unified Computing System 2
The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-12-10
Published