Lucene search

K
cve[email protected]CVE-2014-2332
HistoryAug 31, 2015 - 6:59 p.m.

CVE-2014-2332

2015-08-3118:59:00
CWE-20
web.nvd.nist.gov
23
cve-2014-2332
check_mk
authentication
remote
file deletion
insecure direct object references

6.1 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

42.2%

Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to β€œInsecure Direct Object References.” NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.

6.1 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

42.2%