Information disclosure in Cisco Unified Computing System

CVE-2014-8009

The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_computing_system
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)