Lucene search
HistoryDec 02, 2014 - 1:59 a.m.
CVE-2014-8791
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.291 Low
EPSS
Percentile
96.9%
project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter.
Affected configurations
Node
enaleantuleapMatch7.6
Related
checkpoint_advisories
checkpoint_advisories
Tuleap PHP Unserialize Code Execution (CVE-2014-8791)
2016-10-05 00:00:00
prion
prion
Design/Logic Flaw
2014-12-02 01:59:00
zdt
zdt
Tuleap 7.6-4 PHP Object Injection Vulnerability
2014-11-30 00:00:00
Tuleap PHP Unserialize Code Execution Exploit
2014-12-13 00:00:00
packetstorm
packetstorm
Tuleap PHP Unserialize Code Execution
2014-12-12 00:00:00
Tuleap 7.6-4 PHP Object Injection
2014-11-28 00:00:00
cve
cve
CVE-2014-8791
2014-12-02 01:59:05
securityvulns
securityvulns
cvelist
cvelist
CVE-2014-8791
2014-12-02 01:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.291 Low
EPSS
Percentile
96.9%
Related for NVD:CVE-2014-8791