{"api_version":"1","generated_at":"2026-07-23T09:33:25+00:00","cve":"CVE-2014-1930","urls":{"html":"https://cve.report/CVE-2014-1930","api":"https://cve.report/api/cve/CVE-2014-1930.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-1930","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-1930"},"summary":{"title":"CVE-2014-1930","description":"Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-02-10 22:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/102815","name":"http://osvdb.org/102815","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.kb.cert.org/vuls/id/566894","name":"http://www.kb.cert.org/vuls/id/566894","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"Vulnerability Note VU#566894 - Visibility Software Cyber Recruiter authentication bypass vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/vu/JVNVU97441356/index.html","name":"http://jvn.jp/vu/JVNVU97441356/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVNVU#97441356: Visibility Software Cyber Recruiter に認証回避の脆弱性","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/65305","name":"http://www.securityfocus.com/bid/65305","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Visibility Software Cyber Recruiter Multiple Authentication Bypass Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/102814","name":"http://osvdb.org/102814","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details","name":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cyber Recruiter - Powered by HelpConsole 2010","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1930","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1930","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1930","vulnerable":"1","versionEndIncluding":"8.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"visibility_software","cpe5":"cyber_recruiter","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"1930","cve":"CVE-2014-1930","epss":"0.008250000","percentile":"0.745290000","score_date":"2026-05-04","updated_at":"2026-05-05 00:07:32"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:58:15.519Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"VU#566894","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/566894"},{"name":"102814","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/102814"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://jvn.jp/vu/JVNVU97441356/index.html"},{"name":"65305","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/65305"},{"name":"102815","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/102815"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-02-18T17:57:02.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"VU#566894","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/566894"},{"name":"102814","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/102814"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details"},{"tags":["x_refsource_MISC"],"url":"http://jvn.jp/vu/JVNVU97441356/index.html"},{"name":"65305","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/65305"},{"name":"102815","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/102815"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-1930","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"VU#566894","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/566894"},{"name":"102814","refsource":"OSVDB","url":"http://osvdb.org/102814"},{"name":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details","refsource":"CONFIRM","url":"http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details"},{"name":"http://jvn.jp/vu/JVNVU97441356/index.html","refsource":"MISC","url":"http://jvn.jp/vu/JVNVU97441356/index.html"},{"name":"65305","refsource":"BID","url":"http://www.securityfocus.com/bid/65305"},{"name":"102815","refsource":"OSVDB","url":"http://osvdb.org/102815"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-1930","datePublished":"2014-02-10T22:00:00.000Z","dateReserved":"2014-02-10T00:00:00.000Z","dateUpdated":"2024-08-06T09:58:15.519Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-02-10 22:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"8E219E01-59F5-4AF7-AEE1-48E1F57CC216"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:6.2:*:*:*:*:*:*:*","matchCriteriaId":"999F78ED-5A81-4CD3-BE92-EAD36781FFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7D000435-C3E3-4511-8E94-74CD6A24826C"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:6.6:*:*:*:*:*:*:*","matchCriteriaId":"ACA334AA-0064-4967-B4F2-3678E59813E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:6.8:*:*:*:*:*:*:*","matchCriteriaId":"ACD7E9E4-E187-4FC7-92B9-8C152B323F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1F875BF2-6BA6-43AD-8F46-EE4B9911F9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:visibility_software:cyber_recruiter:7.2:*:*:*:*:*:*:*","matchCriteriaId":"4D406D9A-ACE3-4FFA-9B33-AB056222BDFB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"1930","Ordinal":"1","Title":"CVE-2014-1930","CVE":"CVE-2014-1930","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"1930","Ordinal":"1","NoteData":"Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.","Type":"Description","Title":"CVE-2014-1930"},{"CveYear":"2014","CveId":"1930","Ordinal":"2","NoteData":"2014-02-10","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"1930","Ordinal":"3","NoteData":"2014-02-18","Type":"Other","Title":"Modified"}]}}}