CVE-2014-2871 — MEDIUM (5.0)

Q: How severe is CVE-2014-2871?

CVE-2014-2871 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-2871?

Check the references section above for vendor advisories and patch information. Affected products include: Paperthin Commonspot Content Server.

Vulnerability Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Paperthin	Commonspot Content Server	<= 7.0.1

Related Weaknesses (CWE)

CWE-200

References

http://www.kb.cert.org/vuls/id/437385US Government Resource
http://www.kb.cert.org/vuls/id/437385US Government Resource

FAQ

What is CVE-2014-2871?

CVE-2014-2871 is a vulnerability with a CVSS score of 5.0 (MEDIUM). PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the ...

How severe is CVE-2014-2871?

CVE-2014-2871 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-2871?

Check the references section above for vendor advisories and patch information. Affected products include: Paperthin Commonspot Content Server.