Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-1682
HistoryMay 08, 2014 - 2:29 p.m.

CVE-2014-1682

2014-05-0814:29:14
CWE-287
[email protected]
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.9%

JSON

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.

Affected configurations

NVD
Node
zabbixzabbixRange≤1.8.19
OR
zabbixzabbixMatch1.8
OR
zabbixzabbixMatch1.8.1
OR
zabbixzabbixMatch1.8.2
OR
zabbixzabbixMatch1.8.3rc1
OR
zabbixzabbixMatch1.8.3rc2
OR
zabbixzabbixMatch1.8.3rc3
OR
zabbixzabbixMatch1.8.15rc1
OR
zabbixzabbixMatch1.8.16
OR
zabbixzabbixMatch1.8.18
OR
zabbixzabbixMatch2.0.0
OR
zabbixzabbixMatch2.0.0rc1
OR
zabbixzabbixMatch2.0.0rc2
OR
zabbixzabbixMatch2.0.0rc3
OR
zabbixzabbixMatch2.0.0rc4
OR
zabbixzabbixMatch2.0.0rc5
OR
zabbixzabbixMatch2.0.0rc6
OR
zabbixzabbixMatch2.0.1
OR
zabbixzabbixMatch2.0.1rc1
OR
zabbixzabbixMatch2.0.1rc2
OR
zabbixzabbixMatch2.0.2
OR
zabbixzabbixMatch2.0.2rc1
OR
zabbixzabbixMatch2.0.2rc2
OR
zabbixzabbixMatch2.0.3
OR
zabbixzabbixMatch2.0.3rc1
OR
zabbixzabbixMatch2.0.3rc2
OR
zabbixzabbixMatch2.0.4
OR
zabbixzabbixMatch2.0.4rc1
OR
zabbixzabbixMatch2.0.5
OR
zabbixzabbixMatch2.0.5rc1
OR
zabbixzabbixMatch2.0.6
OR
zabbixzabbixMatch2.0.6rc1
OR
zabbixzabbixMatch2.0.7rc1
OR
zabbixzabbixMatch2.0.8rc1
OR
zabbixzabbixMatch2.0.8rc2
OR
zabbixzabbixMatch2.0.9rc1
OR
zabbixzabbixMatch2.0.9rc2
OR
zabbixzabbixMatch2.0.10rc1
OR
zabbixzabbixMatch2.2.0-
OR
zabbixzabbixMatch2.2.0rc1
OR
zabbixzabbixMatch2.2.0rc2
OR
zabbixzabbixMatch2.2.1
OR
zabbixzabbixMatch2.2.1-
OR
zabbixzabbixMatch2.2.1rc1
OR
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20

Related

ubuntucve 1
prion 1
cve 1
cvelist 1
debiancve 1
nessus 3
mageia 1
openvas 5
fedora 2
ubuntucve
ubuntucve
CVE-2014-1682
2014-05-08 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-05-08 14:29:00
cve
cve
CVE-2014-1682
2014-05-08 14:29:14
cvelist
cvelist
CVE-2014-1682
2014-05-08 14:00:00
debiancve
debiancve
CVE-2014-1682
2014-05-08 14:29:14
nessus
nessus
Fedora 20 : zabbix-2.0.11-3.fc20 (2014-5540)
2014-05-02 00:00:00
Zabbix < 1.8.20 / 2.0.11 / 2.2.2 Multiple Vulnerabilities
2014-03-03 00:00:00
Fedora 19 : zabbix-2.0.11-3.fc19 (2014-5551)
2014-05-02 00:00:00
mageia
mageia
Updated zabbix packages fix multiple vulnerabilities
2014-02-26 01:31:27
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0095)
2022-01-28 00:00:00
Fedora Update for zabbix FEDORA-2014-5540
2014-05-05 00:00:00
Fedora Update for zabbix FEDORA-2014-5540
2014-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: zabbix-2.0.11-3.fc20
2014-05-01 22:21:14
[SECURITY] Fedora 19 Update: zabbix-2.0.11-3.fc19
2014-05-01 22:20:47

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.9%

JSON
Related for NVD:CVE-2014-1682
ubuntucve1prion1cve1cvelist1debiancve1nessus3mageia1openvas5fedora2