CVE-2014-3006

high

Description

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.

References

https://www.lsexperts.de/advisories/lse-2014-04-10.txt

http://www.securityfocus.com/bid/67165

http://www.securityfocus.com/archive/1/531986/100/0/threaded

http://seclists.org/fulldisclosure/2014/Apr/317

Details

Source: Mitre, NVD

Published: 2014-05-02

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00548