Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-6028
HistorySep 05, 2014 - 12:00 a.m.

CVE-2014-6028

2014-09-0500:00:00
ubuntu.com
ubuntu.com
10

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.9%

TorrentFlux 2.4 allows remote authenticated users to obtain other users’
cookies via the cid parameter in an editCookies action to profile.php.

Bugs

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.9%

Related for UB:CVE-2014-6028