CVE-2021-20114

2021-07-3014:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.

CPENameOperatorVersion
tcexameq14.1.15
tcexameq14.5.0
tcexameq12.0.014
tcexameq12.2.1
tcexameq12.1.007
tcexameq12.1.009
tcexameq12.1.015
tcexameq14.1.11
tcexameq14.6.0
tcexameq12.1.002

Name	Operator	Version
tcexam	eq	14.1.15
tcexam	eq	14.5.0
tcexam	eq	12.0.014
tcexam	eq	12.2.1
tcexam	eq	12.1.007
tcexam	eq	12.1.009
tcexam	eq	12.1.015
tcexam	eq	14.1.11
tcexam	eq	14.6.0
tcexam	eq	12.1.002