Vulnerability Description
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors.
CVSS Score
6.5
MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paperthin | Commonspot Content Server | <= 7.0.1 |
Related Weaknesses (CWE)
References
- http://www.kb.cert.org/vuls/id/437385US Government Resource
- http://www.kb.cert.org/vuls/id/437385US Government Resource
FAQ
What is CVE-2014-2862?
CVE-2014-2862 is a vulnerability with a CVSS score of 6.5 (MEDIUM). PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors.
How severe is CVE-2014-2862?
CVE-2014-2862 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2862?
Check the references section above for vendor advisories and patch information. Affected products include: Paperthin Commonspot Content Server.