critical9.8
CVE-2014-2552
Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain a…
Impact
Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brookinsconsulting | Collected Information Export | Version 1.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92129
- https://github.com/brookinsconsulting/bccie/commit/d11811baccf265ff567dddca03cac70b65838a4f
- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-004/?fid=3853
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92129
- https://github.com/brookinsconsulting/bccie/commit/d11811baccf265ff567dddca03cac70b65838a4f
- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-004/?fid=3853