CVE-2014-3274

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle…

published May 23, 2014

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01129 · 66.1th percentile
Published
2014-05-23T22:00Z
EPSS history
Timeline
  • 23 MAY 22:00Z
    Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle…
    cvelistv5