CVE-2014-3274
First published: Fri May 23 2014(Updated: )
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence System Software | <=6.0.5\(5\) | |
| Cisco TelePresence System Software | =1.2.3\(1101\) | |
| Cisco TelePresence System Software | =1.3.2\(1393\) | |
| Cisco TelePresence System Software | =1.4.7\(2229\) | |
| Cisco TelePresence System Software | =1.5.1\(2082\) | |
| Cisco TelePresence System Software | =1.5.3\(2115\) | |
| Cisco TelePresence System Software | =1.5.10\(3648\) | |
| Cisco TelePresence System Software | =1.5.11\(3659\) | |
| Cisco TelePresence System Software | =1.5.12\(3701\) | |
| Cisco TelePresence System Software | =1.5.13\(3717\) | |
| Cisco TelePresence System Software | =1.6.0\(3954\) | |
| Cisco TelePresence System Software | =1.6.2\(4023\) | |
| Cisco TelePresence System Software | =1.6.3\(4042\) | |
| Cisco TelePresence System Software | =1.6.4\(4072\) | |
| Cisco TelePresence System Software | =1.6.5\(4097\) | |
| Cisco TelePresence System Software | =1.6.6\(4109\) | |
| Cisco TelePresence System Software | =1.6.7\(4212\) | |
| Cisco TelePresence System Software | =1.6.8\(4222\) | |
| Cisco TelePresence System Software | =1.7.0.1\(4764\) | |
| Cisco TelePresence System Software | =1.7.0.2\(4719\) | |
| Cisco TelePresence System Software | =1.7.1\(4864\) | |
| Cisco TelePresence System Software | =1.7.2\(4937\) | |
| Cisco TelePresence System Software | =1.7.2.1\(2\) | |
| Cisco TelePresence System Software | =1.7.4\(270\) | |
| Cisco TelePresence System Software | =1.7.5\(42\) | |
| Cisco TelePresence System Software | =1.7.6\(4\) | |
| Cisco TelePresence System Software | =1.8.0\(55\) | |
| Cisco TelePresence System Software | =1.8.1\(34\) | |
| Cisco TelePresence System Software | =1.8.2\(11\) | |
| Cisco TelePresence System Software | =1.8.3\(4\) | |
| Cisco TelePresence System Software | =1.8.4\(13\) | |
| Cisco TelePresence System Software | =1.8.5\(4\) | |
| Cisco TelePresence System Software | =1.9.0\(46\) | |
| Cisco TelePresence System Software | =1.9.0.1\(3\) | |
| Cisco TelePresence System Software | =1.9.1\(68\) | |
| Cisco TelePresence System Software | =1.9.2 | |
| Cisco TelePresence System Software | =1.9.2\(19\) | |
| Cisco TelePresence System Software | =1.9.3 | |
| Cisco TelePresence System Software | =1.9.3\(44\) | |
| Cisco TelePresence System Software | =1.9.4 | |
| Cisco TelePresence System Software | =1.9.4\(19\) | |
| Cisco TelePresence System Software | =1.9.5 | |
| Cisco TelePresence System Software | =1.9.5\(7\) | |
| Cisco TelePresence System Software | =1.9.6 | |
| Cisco TelePresence System Software | =1.9.6\(2\) | |
| Cisco TelePresence System Software | =1.9.6.1\(3\) | |
| Cisco TelePresence System Software | =1.10.0 | |
| Cisco TelePresence System Software | =1.10.0\(259\) | |
| Cisco TelePresence System Software | =1.10.1 | |
| Cisco TelePresence System Software | =1.10.1\(43\) | |
| Cisco TelePresence System Software | =1.10.2\(42\) | |
| Cisco TelePresence System Software | =1.10.3\(41\) | |
| Cisco TelePresence System Software | =4.0.0 | |
| Cisco TelePresence System Software | =6.0.0.1\(4\) | |
| Cisco TelePresence System Software | =6.0.1\(50\) | |
| Cisco TelePresence System Software | =6.0.2\(28\) | |
| Cisco TelePresence System Software | =6.0.3\(33\) | |
| Cisco TelePresence System Software | =6.0.4\(11\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/cisco
- canonical/cisco telepresence system software
- version/cisco telepresence system software/6.0.5\(5\)
- version/cisco telepresence system software/1.2.3\(1101\)
- version/cisco telepresence system software/1.3.2\(1393\)
- version/cisco telepresence system software/1.4.7\(2229\)
- version/cisco telepresence system software/1.5.1\(2082\)
- version/cisco telepresence system software/1.5.3\(2115\)
- version/cisco telepresence system software/1.5.10\(3648\)
- version/cisco telepresence system software/1.5.11\(3659\)
- version/cisco telepresence system software/1.5.12\(3701\)
- version/cisco telepresence system software/1.5.13\(3717\)
- version/cisco telepresence system software/1.6.0\(3954\)
- version/cisco telepresence system software/1.6.2\(4023\)
- version/cisco telepresence system software/1.6.3\(4042\)
- version/cisco telepresence system software/1.6.4\(4072\)
- version/cisco telepresence system software/1.6.5\(4097\)
- version/cisco telepresence system software/1.6.6\(4109\)
- version/cisco telepresence system software/1.6.7\(4212\)
- version/cisco telepresence system software/1.6.8\(4222\)
- version/cisco telepresence system software/1.7.0.1\(4764\)
- version/cisco telepresence system software/1.7.0.2\(4719\)
- version/cisco telepresence system software/1.7.1\(4864\)
- version/cisco telepresence system software/1.7.2\(4937\)
- version/cisco telepresence system software/1.7.2.1\(2\)
- version/cisco telepresence system software/1.7.4\(270\)
- version/cisco telepresence system software/1.7.5\(42\)
- version/cisco telepresence system software/1.7.6\(4\)
- version/cisco telepresence system software/1.8.0\(55\)
- version/cisco telepresence system software/1.8.1\(34\)
- version/cisco telepresence system software/1.8.2\(11\)
- version/cisco telepresence system software/1.8.3\(4\)
- version/cisco telepresence system software/1.8.4\(13\)
- version/cisco telepresence system software/1.8.5\(4\)
- version/cisco telepresence system software/1.9.0\(46\)
- version/cisco telepresence system software/1.9.0.1\(3\)
- version/cisco telepresence system software/1.9.1\(68\)
- version/cisco telepresence system software/1.9.2
- version/cisco telepresence system software/1.9.2\(19\)
- version/cisco telepresence system software/1.9.3
- version/cisco telepresence system software/1.9.3\(44\)
- version/cisco telepresence system software/1.9.4
- version/cisco telepresence system software/1.9.4\(19\)
- version/cisco telepresence system software/1.9.5
- version/cisco telepresence system software/1.9.5\(7\)
- version/cisco telepresence system software/1.9.6
- version/cisco telepresence system software/1.9.6\(2\)
- version/cisco telepresence system software/1.9.6.1\(3\)
- version/cisco telepresence system software/1.10.0
- version/cisco telepresence system software/1.10.0\(259\)
- version/cisco telepresence system software/1.10.1
- version/cisco telepresence system software/1.10.1\(43\)
- version/cisco telepresence system software/1.10.2\(42\)
- version/cisco telepresence system software/1.10.3\(41\)
- version/cisco telepresence system software/4.0.0
- version/cisco telepresence system software/6.0.0.1\(4\)
- version/cisco telepresence system software/6.0.1\(50\)
- version/cisco telepresence system software/6.0.2\(28\)
- version/cisco telepresence system software/6.0.3\(33\)
- version/cisco telepresence system software/6.0.4\(11\)