CVE Daily

CVE-2014-8024

The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used...

Medium CVSS 4.3

Overview

The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.

CWE: CWE-200 Published: 2014-12-23T02:59:04.453
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags