CVE-2014-125028

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-125028
A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is f1e7b3d431c8681ec46445557125890c14fa295f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217148.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://github.com/valtech/valtech-idp-test-clients/commit/f1e7b3d431c8681ec46445557125890c14fa295f Patch Third Party Advisory
https://vuldb.com/?ctiid.217148 Third Party Advisory
https://vuldb.com/?id.217148 Third Party Advisory
https://github.com/valtech/valtech-idp-test-clients/commit/f1e7b3d431c8681ec46445557125890c14fa295f Patch Third Party Advisory
https://vuldb.com/?ctiid.217148 Third Party Advisory
https://vuldb.com/?id.217148 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:valtech:idp_test_clients:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:03

Type Values Removed Values Added
CVSS v2 : 5.0
v3 : 8.8 		v2 : 5.0
v3 : 4.3
References () https://github.com/valtech/valtech-idp-test-clients/commit/f1e7b3d431c8681ec46445557125890c14fa295f - Patch, Third Party Advisory () https://github.com/valtech/valtech-idp-test-clients/commit/f1e7b3d431c8681ec46445557125890c14fa295f - Patch, Third Party Advisory
References () https://vuldb.com/?ctiid.217148 - Third Party Advisory () https://vuldb.com/?ctiid.217148 - Third Party Advisory
References () https://vuldb.com/?id.217148 - Third Party Advisory () https://vuldb.com/?id.217148 - Third Party Advisory

29 Feb 2024, 01:14

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue encontrada en valtech IDP Test Client y clasificada como problemática. Una función desconocida del archivo python-flask/main.py es afectada por este problema. La manipulación conduce a la Cross-Site Request Forgery (CSRF). El ataque puede lanzarse de forma remota. El nombre del parche es f1e7b3d431c8681ec46445557125890c14fa295f. Se recomienda aplicar un parche para solucionar este problema. El identificador de esta vulnerabilidad es VDB-217148.
Information

Published : 2022-12-31 20:15

Updated : 2024-11-21 02:03

NVD link : CVE-2014-125028

Mitre link : CVE-2014-125028

CVE.ORG link : CVE-2014-125028

JSON object : View

Products Affected

valtech

  • idp_test_clients
CWE
CWE-352

Cross-Site Request Forgery (CSRF)