medium6.5
CVE-2014-5131
Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.
Impact
Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avolvesoftware | Projectdox | Version 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
- http://www.securityfocus.com/archive/1/533345/100/0/threaded
- http://www.securityfocus.com/bid/69632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95736
- http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
- http://www.securityfocus.com/archive/1/533345/100/0/threaded
- http://www.securityfocus.com/bid/69632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95736