Conga luci CVE-2014-3521 Security Bypass Vulnerability
BID:69820
Info
Conga luci CVE-2014-3521 Security Bypass Vulnerability
| Bugtraq ID: | 69820 |
| Class: | Design Error |
| CVE: |
CVE-2014-3521 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 16 2014 12:00AM |
| Updated: | Oct 01 2014 01:02AM |
| Credit: | Radek Steiger of Red Hat |
| Vulnerable: |
Oracle Enterprise Linux 5 CentOS CentOS 5 |
| Not Vulnerable: | |
Discussion
Conga luci CVE-2014-3521 Security Bypass Vulnerability
Conga luci is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Conga luci is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Exploit / POC
Conga luci CVE-2014-3521 Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Conga luci CVE-2014-3521 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Conga luci CVE-2014-3521 Security Bypass Vulnerability
References:
References: