CVE-2014-2536

Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator password via unknown vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2014-03-18

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Expressway Cloud Access 360 (Intel)
• Cloud Identity Manager (Mcafee)
• Cloud Single Sign On (Mcafee)

References

• http://secunia.com/advisories/57368
• http://secunia.com/advisories/57381
• http://www.securityfocus.com/bid/66181
• https://kc.mcafee.com/corporate/index?page=content&id=SB10066