CVE-2014-9504 in Open Atrium

الملخص

بحسب MITRE

The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 03/01/2015
• إفشاء: 01/02/2018
• الاعتدال: تمت الموافقة
• إدخال: VDB-112716
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.01612
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9504
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9504
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9504/