Lucene search
HistorySep 05, 2014 - 2:55 p.m.
CVE-2014-6029
torrentflux
2.4
remote authenticated users
delete
modify
cookies
cid parameter
editcookies action
profile.php
nvd
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.0%
TorrentFlux 2.4 allows remote authenticated users to delete or modify other users’ cookies via the cid parameter in an editCookies action to profile.php.
Affected configurations
Node
torrentflux_projecttorrentfluxMatch2.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| torrentflux_project:torrentflux | torrentflux project torrentflux | eq | 2.4 |
Related
prion
prion
Code injection
2014-09-05 14:55:00
cvelist
cvelist
CVE-2014-6029
2014-09-05 14:00:00
nvd
nvd
CVE-2014-6029
2014-09-05 14:55:04
ubuntucve
ubuntucve
CVE-2014-6029
2014-09-05 00:00:00
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.0%
Related for CVE-2014-6029