Improper input validation in Cisco Tidal Enterprise Scheduler
CVE-2014-3272
The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (23.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Tidal_enterprise_scheduler — versions 3.0.0, 3.0.1, 5.2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)