Lucene search
HistoryOct 06, 2014 - 2:55 p.m.
CVE-2014-3521
red hat conga
access restrictions
crafted url
remote authentication
vulnerability
6 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.3%
The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.
Affected configurations
Node
redhatcongaMatch0.12.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:conga | redhat conga | eq | 0.12.2 |
Related
nvd
nvd
CVE-2014-3521
2014-10-06 14:55:09
prion
prion
Design/Logic Flaw
2014-10-06 14:55:00
cvelist
cvelist
CVE-2014-3521
2014-10-06 14:00:00
veracode
veracode
Information Disclosure
2019-05-02 05:04:02
Access Restriction Bypass
2019-05-02 05:04:02
nessus
nessus
Oracle Linux 5 : conga (ELSA-2014-1194)
2014-09-18 00:00:00
RHEL 5 : conga (RHSA-2014:1194)
2014-11-08 00:00:00
CentOS 5 : conga (CESA-2014:1194)
2014-10-01 00:00:00
centos
centos
luci, ricci security update
2014-09-30 11:21:33
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1194)
2015-10-06 00:00:00
CentOS Update for luci CESA-2014:1194 centos5
2014-10-01 00:00:00
redhat
redhat
(RHSA-2014:1194) Moderate: conga security and bug fix update
2014-09-16 00:00:00
oraclelinux
oraclelinux
conga security and bug fix update
2014-09-17 00:00:00
6 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
45.3%
Related for CVE-2014-3521