Vulnerability in Redhat Conga

CVE-2014-3521

The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.

EPSS: 0.014 (70.2th percentile) — read the EPSS interpretation.

Affected products

Redhat Conga — versions 0.12.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)