CVE-2014-6276

Description

schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.13

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2014-6276 are fixed in Python-roundup 1.5.1	Windows
roundup security update(DSA-3502-1) roundup_1.4.20-1.1+deb7u1_all.deb	Linux
roundup security update(DSA-3502-1) roundup_1.4.20-1.1+deb8u1_all.deb	Linux
Vulnerabilities CVE-2014-6276 are fixed in Python-roundup for linux 1.5.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234