Vulnerability in Sitepark Information Enterprise Server

CVE-2014-3006

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.

Affected products

Sitepark Information_enterprise_server — versions 2.9
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)