CVE-2014-2868

概要

参考情報

• kb.cert.org/vuls/id/437385 · US Government Resource

commonspot content server のその他の脆弱性

• CVE-2014-2874緊急 10.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unsp…
• CVE-2014-2873中 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attacker…
• CVE-2014-2872中 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain potentially sensitive information from a directory …
• CVE-2014-2871中 5.0PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remot…
• CVE-2014-2870中 5.0The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database,…