PT-2014-4933 · Paperthin · Commonspot

Will Dormann · Publicado 2014-04-15 · Atualizado 2014-04-16 · CVE-2014-2866

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PaperThin CommonSpot versions prior to 7.0.2 PaperThin CommonSpot versions 8.x prior to 8.0.3

Description The issue relies on client JavaScript code for access restrictions. This allows remote attackers to perform unspecified operations by modifying the JavaScript code.

Recommendations For versions prior to 7.0.2, update to version 7.0.2 or later. For versions 8.x prior to 8.0.3, update to version 8.0.3 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-2866

Produtos afetados

Commonspot

Referências · 3

• http://kb.cert.org/vuls/id/437385 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2866 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2866 · Nota de Segurança