Lucene search
HistoryMay 08, 2014 - 10:55 a.m.
CVE-2014-2936
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.3%
The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.
Affected configurations
Node
calderacalderaMatch9.20
Related
cve
cve
CVE-2014-2936
2014-05-08 10:55:04
cvelist
cvelist
CVE-2014-2936
2014-05-08 10:00:00
prion
prion
Sql injection
2014-05-08 10:55:00
cert
cert
Caldera 9.20 contains multiple vulnerabilities
2014-05-07 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.3%
Related for NVD:CVE-2014-2936