PT-2018-4257 · Avolve · Projectdox

Publicado 2018-03-27 · Atualizado 2019-03-11 · CVE-2014-5131

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avolve Software ProjectDox version 8.1

Description The issue allows remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.

Recommendations For Avolve Software ProjectDox version 8.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-5131

Produtos afetados

Projectdox

Referências · 5

• http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html · Nota
• http://securityfocus.com/bid/69632 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5131 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95736 · Nota
• http://securityfocus.com/archive/1/533345/100/0/threaded · Nota