CVE-2014-1930 | BDVDB-2026-59847 Detail

Description#

Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/566894
http://osvdb.org/102814
http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details
http://jvn.jp/vu/JVNVU97441356/index.html
http://www.securityfocus.com/bid/65305
http://osvdb.org/102815

Exploit#

No public exploit known

History#

Version 12014-02-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.