Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/95737 | Third Party Advisory VDB Entry |
http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html | Third Party Advisory VDB Entry |
http://www.securityfocus.com/archive/1/533345/100/0/threaded | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2018-03-27 14:29
Updated : 2019-03-11 12:24
NVD link : CVE-2014-5132
Mitre link : CVE-2014-5132
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
avolvesoftware
- projectdox