CVE-2014-3006

EUVD-2014-3028
Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
siteparkinformation_enterprise_server
2.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2014/Apr/317
http://www.securityfocus.com/archive/1/531986/100/0/threaded
http://www.securityfocus.com/bid/67165
https://www.lsexperts.de/advisories/lse-2014-04-10.txt
http://seclists.org/fulldisclosure/2014/Apr/317
http://www.securityfocus.com/archive/1/531986/100/0/threaded
http://www.securityfocus.com/bid/67165
https://www.lsexperts.de/advisories/lse-2014-04-10.txt