Path Traversal in Intel Expressway Cloud Access 360
CVE-2014-2536
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator password via unknown vectors.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Intel Expressway_cloud_access_360 — versions 2.1, 2.5
- Mcafee Cloud_identity_manager — versions 3.0, 3.1, 3.5.1
- Mcafee Cloud_single_sign_on — versions 4.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)