PT-2020-7630 · Xmind · Xmind

Published 2020-01-21 · Updated 2020-01-30 · CVE-2014-2680

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xmind versions 3.4.1 and earlier

Description The update process in the software allows remote attackers to execute arbitrary code via a man-in-the-middle attack.

Recommendations For Xmind versions 3.4.1 and earlier, update to a version later than 3.4.1 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2014-2680

Affected Products

Xmind

References · 2

• 🔥 https://web.archive.org/web/20160822124252/http://rampartssecurity.com/docs/Xmind-MITM.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2680 · Security Note