CVE-2014-3006 | BDVDB-2026-61389 Detail

Description#

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.lsexperts.de/advisories/lse-2014-04-10.txt
http://seclists.org/fulldisclosure/2014/Apr/317
http://www.securityfocus.com/bid/67165
http://www.securityfocus.com/archive/1/531986/100/0/threaded

Exploit#

No public exploit known

History#

Version 12014-05-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.