CVE-2014-8391

MEDIUM 4.0CVE-2014-8391 · Published 02/06/2015 · updated 17/06/2026

In short

CVE-2014-8391 is a MEDIUM (CVSS 4.0) vulnerability affecting sendio (sendio).
Chance of exploitation in the next 30 days (EPSS): 5.4%, higher than 92.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sendio sendio	`≤ 7.2.3`	No fix yet

Description

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests.

References

packetstormsecurity.com/files/132022/Sendio-ESP-Information-Disclosure.html · Exploit
seclists.org/fulldisclosure/2015/May/95 · Exploit
securityfocus.com/archive/1/535592/100/0/threaded
sendio.com/software-release-history · Vendor Advisory
exploit-db.com/exploits/37114 · Exploit

More vulnerabilities in sendio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free