CVE-2014-3272

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-3272

6.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:H/Au:S/C:C/I:C/A:C

Exploitability : 1.5 / Impact : 10.0

Access Vector LOCAL

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

T

he Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.

References
Link Resource
http://secunia.com/advisories/58922
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 Vendor Advisory
http://www.securitytracker.com/id/1030275 Third Party Advisory VDB Entry
http://secunia.com/advisories/58922
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 Vendor Advisory
http://www.securitytracker.com/id/1030275 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:tidal_enterprise_scheduler:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:5.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:tidal_enterprise_scheduler:6.0.3:*:*:*:*:*:*:*
History

21 Nov 2024, 02:07

Type Values Removed Values Added
References () http://secunia.com/advisories/58922 - () http://secunia.com/advisories/58922 -
References () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3272 - Vendor Advisory
References () http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 - Vendor Advisory () http://tools.cisco.com/security/center/viewAlert.x?alertId=34339 - Vendor Advisory
References () http://www.securitytracker.com/id/1030275 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1030275 - Third Party Advisory, VDB Entry
Information

Published : 2014-05-26 00:25

Updated : 2025-04-12 10:46

NVD link : CVE-2014-3272

Mitre link : CVE-2014-3272

CVE.ORG link : CVE-2014-3272

JSON object : View

Products Affected

cisco

CWE
CWE-20

Improper Input Validation