Lucene search

[email protected]CVE-2014-1931

HistoryFeb 10, 2014 - 10:55 p.m.

CVE-2014-1931

2014-02-1022:55:03

CWE-200

[email protected]

web.nvd.nist.gov

cve-2014-1931

visibility software

cyber recruiter

user login page

account-related information

remote attackers

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.

Affected configurations

NVD

Node

visibility_softwarecyber_recruiterRange≤8.0

visibility_softwarecyber_recruiterMatch6.2

visibility_softwarecyber_recruiterMatch6.4

visibility_softwarecyber_recruiterMatch6.6

visibility_softwarecyber_recruiterMatch6.8

visibility_softwarecyber_recruiterMatch7.0

visibility_softwarecyber_recruiterMatch7.2

CPENameOperatorVersion
visibility_software:cyber_recruitervisibility software cyber recruiterle8.0
visibility_software:cyber_recruitervisibility software cyber recruitereq6.2
visibility_software:cyber_recruitervisibility software cyber recruitereq6.4
visibility_software:cyber_recruitervisibility software cyber recruitereq6.6
visibility_software:cyber_recruitervisibility software cyber recruitereq6.8
visibility_software:cyber_recruitervisibility software cyber recruitereq7.0
visibility_software:cyber_recruitervisibility software cyber recruitereq7.2

CPE	Name	Operator	Version
visibility_software:cyber_recruiter	visibility software cyber recruiter	le	8.0
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	6.2
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	6.4
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	6.6
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	6.8
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	7.0
visibility_software:cyber_recruiter	visibility software cyber recruiter	eq	7.2

References

www.securityfocus.com/bid/65564

www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

Related for CVE-2014-1931

prion1 cvelist1 nvd1