CVE-2014-8025
Cisco Jabber Guest Server - Exposure of Sensitive Information via HTTP GET/POST Responses
Title source: llmDescription
The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031422
Various Sources vendor-advisory
x_refsource_cisco
https://tools.cisco.com/security/center/viewAlert.x?alertId=36871
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8025
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/71768
Scores
EPSS
0.0182
EPSS Percentile
76.2%
Details
CWE
CWE-200
Status
published
Products (1)
cisco/jabber_guest
Published
Dec 23, 2014
Tracked Since
Feb 18, 2026