Lucene search

K
nvd[email protected]NVD:CVE-2014-1984
HistoryApr 19, 2014 - 7:55 p.m.

CVE-2014-1984

2014-04-1919:55:07
CWE-287
web.nvd.nist.gov
5

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

Nvd
Node
cybozuremote_service_managerRange2.3.0
OR
cybozuremote_service_managerRange3.0.03.1.0
VendorProductVersionCPE
cybozuremote_service_manager*cpe:2.3:a:cybozu:remote_service_manager:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

Related for NVD:CVE-2014-1984