CVE-2014-3006

Published: May 2, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.

Affected (1)

Products: Sitepark: Information Enterprise Server

1 product

Information Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sitepark Information Enterprise Server	Version 2.9

Related CWEs

References (8)

http://seclists.org/fulldisclosure/2014/Apr/317

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/531986/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/67165

Source: cve@mitre.org

https://www.lsexperts.de/advisories/lse-2014-04-10.txt

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Apr/317

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/531986/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/67165

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.lsexperts.de/advisories/lse-2014-04-10.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.