What is CVE-2014-8607?

CVE-2014-8607 is a vulnerability in Xcloner, classified under Information Disclosure. Published 2015-06-10.

Is CVE-2014-8607 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Xcloner

CVE-2014-8607

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.0th percentile) — read the EPSS interpretation.

Affected products

Xcloner — versions 3.1.1, 3.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-8607?: CVE-2014-8607 is a vulnerability in Xcloner, classified under Information Disclosure. Published 2015-06-10.
Is CVE-2014-8607 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.