CVE-2014-1931
Published Feb 10, 2014
Last updated 11 years ago
Overview
- Description
- The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E219E01-59F5-4AF7-AEE1-48E1F57CC216",
"versionEndIncluding": "8.0"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "999F78ED-5A81-4CD3-BE92-EAD36781FFFD"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D000435-C3E3-4511-8E94-74CD6A24826C"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACA334AA-0064-4967-B4F2-3678E59813E5"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACD7E9E4-E187-4FC7-92B9-8C152B323F76"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F875BF2-6BA6-43AD-8F46-EE4B9911F9BC"
},
{
"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D406D9A-ACE3-4FFA-9B33-AB056222BDFB"
}
],
"operator": "OR"
}
]
}
]