MEDIUM · 5.0

CVE-2014-2869

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address...

Vulnerability Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
PaperthinCommonspot Content Server<= 7.0.1

Related Weaknesses (CWE)

References

FAQ

What is CVE-2014-2869?

CVE-2014-2869 is a vulnerability with a CVSS score of 5.0 (MEDIUM). PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address...

How severe is CVE-2014-2869?

CVE-2014-2869 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-2869?

Check the references section above for vendor advisories and patch information. Affected products include: Paperthin Commonspot Content Server.