Lucene search

[email protected]NVD:CVE-2014-10076

HistoryOct 05, 2018 - 6:29 a.m.

CVE-2014-10076

2018-10-0506:29:00

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.009

Percentile

83.3%

JSON

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack.

Affected configurations

Nvd

Node

wp-db-backup_projectwp-db-backupMatch2.2.4wordpress

VendorProductVersionCPE
wp-db-backup_projectwp-db-backup2.2.4cpe:2.3:a:wp-db-backup_project:wp-db-backup:2.2.4:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wp-db-backup_project	wp-db-backup	2.2.4	cpe:2.3:a:wp-db-backup_project:wp-db-backup:2.2.4:::::wordpress::

References

www.vapidlabs.com/advisory.php?v=81

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.009

Percentile

83.3%

JSON

Related for NVD:CVE-2014-10076

cvelist1 cve1 prion1 wpvulndb1