CVE-2014-6276 in Roundup
Summary
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
09/09/2014
Disclosure
04/13/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 82303 | Roundup schema.py access control | 264 | Not defined | Official fix | CVE-2014-6276 |