CVE-2014-1931

{"id": "CVE-2014-1931", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-02-10T22:55:03.933", "references": [{"url": "http://www.securityfocus.com/bid/65564", "source": "cve@mitre.org"}, {"url": "http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests."}, {"lang": "es", "value": "La p\u00e1gina de inicio de sesi\u00f3n de usuario en Visibility Software Cyber Recruiter anterior a 8.1.00 genera respuestas diferentes para intentos de recuperaci\u00f3n de contrase\u00f1a no v\u00e1lidos dependiendo de qu\u00e9 elementos de los datos sean incorrectos, lo que podr\u00eda permitir a atacantes remotos obtener informaci\u00f3n relacionada con cuentas a trav\u00e9s de una serie de solicitudes."}], "lastModified": "2014-02-21T05:06:47.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E219E01-59F5-4AF7-AEE1-48E1F57CC216", "versionEndIncluding": "8.0"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "999F78ED-5A81-4CD3-BE92-EAD36781FFFD"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D000435-C3E3-4511-8E94-74CD6A24826C"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACA334AA-0064-4967-B4F2-3678E59813E5"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACD7E9E4-E187-4FC7-92B9-8C152B323F76"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F875BF2-6BA6-43AD-8F46-EE4B9911F9BC"}, {"criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D406D9A-ACE3-4FFA-9B33-AB056222BDFB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}