CVE-2014-2536: Intel Expressway Cloud Access 360

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access 360-SSO 2.1 and 2.5 allows remote authenticated users to read an unspecified file containing a hash of the administrator password via unknown vectors.

Affected products

• Intel Expressway Cloud Access 360: version 2.1 only; version 2.5 only
• McAfee Cloud Identity Manager: version 3.0 only; version 3.1 only; version 3.5.1 only
• McAfee Cloud Single Sign On: version 4.0.0 only

Published 2014-03-18. Last modified 2026-06-17.