CVE-2014-5128

Published: Aug 29, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.

Affected (1)

Products: Iii: Encore Discovery Solution

Iii

1 product

Encore Discovery Solution

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Iii Encore Discovery Solution	Version 4.3

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/533233/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/69431

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/95570

Source: cve@mitre.org

http://packetstormsecurity.com/files/128013/Encore-Discovery-Solution-4.3-Open-Redirect-Session-Token-In-URL.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/533233/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69431

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/95570

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.