CVE-2014-0665

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-06664.3Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attCVE-2014-06676.3The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authCVE-2014-06684.3Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitraCVE-2014-06695.0The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remoteCVE-2014-06704.3Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary weCVE-2014-06715.8Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attackCVE-2014-06724.0The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated usCVE-2014-06734.3Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote atCVE-2014-06746.8Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attacCVE-2014-06756.4The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different cusCVE-2014-06766.8Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.CVE-2014-06775.0The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP sessi
CVE-2014-0665: Medium severity, CVSS 4.0 | Vulnix