CVE-2014-6047

EPSS 4.67%
Published 28.08.2018 17:29:01
Last modified 21.11.2024 02:13:41
Source cve@mitre.org
Teams watchlist Login
Open Login

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Phpmyfaq ≫ Phpmyfaq Version < 2.8.13

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	4.67%	0.883

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://techdefencelabs.com/security-advisories.html

Third Party Advisory

https://www.phpmyfaq.de/security/advisory-2014-09-16

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-6047

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-6047

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-6047

EUVD