Lucene search
MitreCVE-2014-6029HistorySep 05, 2014 - 2:55 p.m.
CVE-2014-6029
2014-09-0514:55:04
CWE-20
mitre
web.nvd.nist.gov
30
torrentflux
2.4
remote authenticated users
delete
modify
cookies
cid parameter
editcookies action
profile.php
nvd
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
70.9%
TorrentFlux 2.4 allows remote authenticated users to delete or modify other users’ cookies via the cid parameter in an editCookies action to profile.php.
Affected configurations
Node
torrentflux_projecttorrentfluxMatch2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| torrentflux_project | torrentflux | 2.4 | cpe:2.3:a:torrentflux_project:torrentflux:2.4:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2014-09-05 14:55:00
cvelist
cvelist
CVE-2014-6029
2014-09-05 14:00:00
ubuntucve
ubuntucve
CVE-2014-6029
2014-09-05 00:00:00
nvd
nvd
CVE-2014-6029
2014-09-05 14:55:04
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
70.9%
Related for CVE-2014-6029