Unscored severity · published Mar 18, 2014
CVE-2014-2536
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator password via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cloud Identity Manager · Mcafee
3.0; 3.1; 3.5.1 · source: NVD
CS
Cloud Single Sign ON · Mcafee
4.0.0 · source: NVD
EC
Expressway Cloud Access 360 · Intel
2.1; 2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2536
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2536
Vendor Advisory
http://secunia.com/advisories/57368
Vendor Advisory
http://secunia.com/advisories/57381
www.securityfocus.com
http://www.securityfocus.com/bid/66181
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10066