CVE-2014-8024
Cisco Jabber Guest Server - Exposure of Sensitive Information via HTTP Request Sniffing
Title source: llmDescription
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031422
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8024
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/71770
Various Sources vendor-advisory
x_refsource_cisco
https://tools.cisco.com/security/center/viewAlert.x?alertId=36870
Scores
EPSS
0.0182
EPSS Percentile
76.2%
Details
CWE
CWE-200
Status
published
Products (1)
cisco/jabber_guest
Published
Dec 23, 2014
Tracked Since
Feb 18, 2026