CVE-2014-2536 Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows r...
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator password via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel expressway cloud access 360 | = 2.1 | No fix listed |
| intel expressway cloud access 360 | = 2.5 | No fix listed |
| mcafee cloud identity manager | = 3.0 | No fix listed |
| mcafee cloud identity manager | = 3.1 | No fix listed |
| mcafee cloud identity manager | = 3.5.1 | No fix listed |
| mcafee cloud single sign on | = 4.0.0 | No fix listed |
References
- 57368 third-party-advisory vendor-advisory
- 57381 third-party-advisory vendor-advisory
- 66181 vdb-entry
- kc.mcafee.com vendor-advisory