CVE-2014-3006

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
siteparkinformation_enterprise_server
2.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2014/Apr/317
http://www.securityfocus.com/archive/1/531986/100/0/threaded
http://www.securityfocus.com/bid/67165
https://www.lsexperts.de/advisories/lse-2014-04-10.txt
http://seclists.org/fulldisclosure/2014/Apr/317
http://www.securityfocus.com/archive/1/531986/100/0/threaded
http://www.securityfocus.com/bid/67165
https://www.lsexperts.de/advisories/lse-2014-04-10.txt