CVE-2014-1931

Published: Feb 10, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.

Affected (7)

Products: Visibility Software: Cyber Recruiter

Visibility Software

1 product

Cyber Recruiter

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Visibility Software Cyber Recruiter	Up to 8.0
Visibility Software Cyber Recruiter	Version 6.2
Visibility Software Cyber Recruiter	Version 6.4
Visibility Software Cyber Recruiter	Version 6.6
Visibility Software Cyber Recruiter	Version 6.8
Visibility Software Cyber Recruiter	Version 7.0
Visibility Software Cyber Recruiter	Version 7.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www.securityfocus.com/bid/65564

Source: cve@mitre.org

http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/65564

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.