Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-2332
HistoryAug 31, 2015 - 6:59 p.m.

Design/Logic Flaw

2015-08-3118:59:00
PRIOn knowledge base
www.prio-n.com
6

6.4 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

41.6%

Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to “Insecure Direct Object References.” NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.

CPENameOperatorVersion
check_mkle1.2.3
check_mkle1.2.2

6.4 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

41.6%