CVEvulnerability
CVE-2014-3006
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.
Affected configurations
• sitepark information enterprise server 2.9
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2014/Apr/317 seclists.org
- http://www.securityfocus.com/archive/1/531986/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67165 www.securityfocus.com
- https://www.lsexperts.de/advisories/lse-2014-04-10.txt www.lsexperts.de
- http://seclists.org/fulldisclosure/2014/Apr/317 seclists.org
- http://www.securityfocus.com/archive/1/531986/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/67165 www.securityfocus.com
- https://www.lsexperts.de/advisories/lse-2014-04-10.txt www.lsexperts.de