PT-2014-4370 · Visibility · Cyber Recruiter

Published 2014-02-10 · Updated 2014-02-21 · CVE-2014-1931

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Visibility Software Cyber Recruiter versions prior to 8.1.00

Description The issue concerns the user login page, which generates different responses for invalid password-retrieval attempts based on incorrect data elements. This might allow remote attackers to obtain account-related information via a series of requests.

Recommendations For versions prior to 8.1.00, update to version 8.1.00 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-1931

Affected Products

Cyber Recruiter

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1931 · Security Note
• http://vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details · Vendor Advisory
• http://securityfocus.com/bid/65564 · Note