NVD

Id
31888  
Name
CVE-2014-3781  
Description
The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-06-11  
Modified Date
2014-06-12  
Seq
2014-3781  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168145 31888 CVE-2014-3781 http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3  View
168146 31888 CVE-2014-3781 http://karmainsecurity.com/KIS-2014-05  View
168147 31888 CVE-2014-3781 http://packetstormsecurity.com/files/126766/Dotclear-2.6.2-Authentication-Bypass.html  View
168148 31888 CVE-2014-3781 20140521 [KIS-2014-05] Dotclear <= 2.6.2 (XML-RPC Interface) Authentication Bypass Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14033 JVNDB-2014-002908 Dotclear の nc/core/class.dc.xmlrpc.php の dcXmlRpc::setUser メソッドにおける認証を回避される脆弱性 Dotclear の nc/core/class.dc.xmlrpc.php の dcXmlRpc::setUser メソッドには、認証を回避される脆弱性が存在します。 CVE-2014-3781 71069 CVE-2014-3781 31888 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002908.html 2014-05-16 2014-06-16 View