6.5
CVE-2014-5028
- EPSS 0.49%
- Veröffentlicht 29.03.2018 18:29:00
- Zuletzt bearbeitet 21.11.2024 02:11:19
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Reviewboard ≫ Review Board Version > 1.7.0 < 1.7.27
Reviewboard ≫ Review Board Version >= 2.0 < 2.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.629 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.