← volver
CVE-2014-5028

CVE-2014-5028

EPSS 1.7%
The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://bugzilla.redhat.com/show_bug.cgi?id=1123692https://exchange.xforce.ibmcloud.com/vulnerabilities/94813https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releaseshttp://www.openwall.com/lists/oss-security/2014/07/22/12