What is CVE-2014-6276?

CVE-2014-6276 is a medium-severity vulnerability in Roundup-Tracker Roundup, classified under CWE-264. CVSS score: 4.3/10. Published 2016-04-13.

How severe is CVE-2014-6276?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Roundup-Tracker Roundup

CVE-2014-6276

schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Roundup-tracker Roundup
Debian Debian_linux — versions 7.0, 8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security@debian.org (x_refsource_CONFIRM)
security@debian.org (vendor-advisory, x_refsource_DEBIAN)
security@debian.org (x_refsource_CONFIRM, Patch)

Frequently asked questions

What is CVE-2014-6276?: CVE-2014-6276 is a medium-severity vulnerability in Roundup-Tracker Roundup, classified under CWE-264. CVSS score: 4.3/10. Published 2016-04-13.
How severe is CVE-2014-6276?: Medium severity. CVSS v3 base score is 4.3 out of 10.