CVE-2014-9921

Critical

Published: 14/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2014-9921 describes a configuration error in McAfee Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier that allows remote unauthenticated users to view, add, and remove users.

Risk Assessment

This vulnerability may lead to unauthorized access to user accounts, posing a risk of data breaches and loss of control over the system.

Recommendation

It is recommended to update to the latest version of CADS and review the configuration to secure access to the system.

Original NVD description (English source)

Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error.