CVE-2014-5130

Опубликовано: 27 мар. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token.

Ссылки

http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533345/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/69621
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95735
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533345/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/69621
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95735
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:avolvesoftware:projectdox:8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00926

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-4x4q-hm5f-jqrv