Lucene search

K
nvd[email protected]NVD:CVE-2014-5031
HistoryJul 29, 2014 - 2:55 p.m.

CVE-2014-5031

2014-07-2914:55:07
CWE-264
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

8.4 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

Affected configurations

NVD
Node
applecupsRange1.7.4
OR
applecupsMatch1.7rc1
OR
applecupsMatch1.7.0
OR
applecupsMatch1.7.1
OR
applecupsMatch1.7.1b1
OR
applecupsMatch1.7.2
OR
applecupsMatch1.7.3
Node
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

8.4 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%