4.3
CVE-2014-6276
- EPSS 1.54%
- Veröffentlicht 13.04.2016 14:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- CVE-Watchlists
- Unerledigt
Loginschema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Roundup-tracker ≫ Roundup Version <= 1.5.0
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.54% | 0.716 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
http://hg.code.sf.net/p/roundup/code/rev/a403c29ffaf9
http://www.debian.org/security/2016/dsa-3502
https://sourceforge.net/p/roundup/code/ci/tip/tree/CHANGES.txt