CVE

Id
70144  
CVE No.
CVE-2014-2849  
Status
Candidate  
Description
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.  
Phase
Assigned (20140411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668828 70144 CVE-2014-2849 EXPLOIT-DB:32789  View
668829 70144 CVE-2014-2849 URL:http://www.exploit-db.com/exploits/32789  View
668830 70144 CVE-2014-2849 MISC:http://www.zerodayinitiative.com/advisories/ZDI-14-069/  View
668831 70144 CVE-2014-2849 CONFIRM:http://www.sophos.com/en-us/support/knowledgebase/120230.aspx  View
668832 70144 CVE-2014-2849 BID:66734  View
668833 70144 CVE-2014-2849 URL:http://www.securityfocus.com/bid/66734  View
668834 70144 CVE-2014-2849 SECUNIA:57706  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13271 JVNDB-2014-002146 Pivotal Grails 用 Resources プラグインのデフォルト設定における重要な情報を取得される脆弱性 Pivotal Grails 用 Resources プラグインのデフォルト設定は、META-INF ディレクトリ内のファイルへのアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-2857 70144 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002146.html  View