Lucene search

K
nvd[email protected]NVD:CVE-2014-8175
HistoryJul 08, 2015 - 3:59 p.m.

CVE-2014-8175

2015-07-0815:59:00
CWE-264
web.nvd.nist.gov

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.0%

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.

Affected configurations

NVD
Node
redhatjboss_fuseRange6.1.0

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.0%

Related for NVD:CVE-2014-8175