Detections
Analytics

CVE-2014-2552

critical

Description

Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.

References

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-004/?fid=3853

https://github.com/brookinsconsulting/bccie/commit/d11811baccf265ff567dddca03cac70b65838a4f

https://exchange.xforce.ibmcloud.com/vulnerabilities/92129

Details

Source: Mitre, NVD

Published: 2018-04-27

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.05315