CVE-2014-2849 - CERT CVE

  1. CVE-2014-2849

ID CVE-2014-2849
Sažetak The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
Reference
CVSS
Base: 8.5
Impact: 9.2
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE COMPLETE COMPLETE
CVSS vektor AV:N/AC:L/Au:S/C:N/I:C/A:C
Zadnje važnije ažuriranje 14-04-2014 - 15:38
Objavljeno 11-04-2014 - 15:55