CVEvulnerability
CVE-2014-1217
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.
Affected configurations
• livetecs timeline 2.81
• livetecs timeline 2.91
• livetecs timeline 2.94
• livetecs timeline 3.0.1
• livetecs timeline 3.0.3
• livetecs timeline 3.0.5
• livetecs timeline 3.1.1
• livetecs timeline 3.2.1
• livetecs timeline 3.5.1
• livetecs timeline 3.6.1
• livetecs timeline 3.7.1
• livetecs timeline 3.8.1
• livetecs timeline 4.2.1
• livetecs timeline 4.3.1
• livetecs timeline 4.9.1
• livetecs timeline 5.2.1
• livetecs timeline 6.0.1
• livetecs timeline 6.2.1
• livetecs timeline 6.2.3
• livetecs timeline 6.2.4
• livetecs timeline 6.2.6
• livetecs timeline 6.2.7
• livetecs timeline 6.2.71
• livetecs timeline 7.1.1
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2014/Apr/259 seclists.org
- http://www.securityfocus.com/archive/1/531911/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67043 www.securityfocus.com
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/ www.portcullis-security.com
- http://seclists.org/fulldisclosure/2014/Apr/259 seclists.org
- http://www.securityfocus.com/archive/1/531911/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67043 www.securityfocus.com
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1217/ www.portcullis-security.com