NVD

Id
34093  
Name
CVE-2014-6607  
Description
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-06  
Modified Date
2014-10-07  
Seq
2014-6607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
177098 34093 CVE-2014-6607 http://packetstormsecurity.com/files/128321/M-Monit-3.2.2-Cross-Site-Request-Forgery.html  View
177099 34093 CVE-2014-6607 20140919 M/Monit - Account hijacking via CSRF  View
177100 34093 CVE-2014-6607 34718  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15681 JVNDB-2014-004556 M/Monit における他のユーザのパスワードを変更される脆弱性 M/Monit は、パスワードを変更する前に元のパスワードを検証しないため、他のユーザのパスワードを変更され、権限を取得される脆弱性が存在します。 CVE-2014-6607 73899 CVE-2014-6607 34093 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004556.html 2014-09-19 2014-10-08 View