CVE-2014-3929

2017-04-0315:00:00

mitre

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.003

Percentile

66.3%

JSON

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

References

www.s3.eurecom.fr/cve/CVE-2014-3929.txt

github.com/Cougar/lg/issues/5

hackerone.com/reports/16330