CVE-2014-5028

The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids.

CVSS v3.0 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3.0 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases	Vendor Advisory
https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4	Vendor Advisory
https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94813	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1123692	Issue Tracking Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/22/12	Mailing List Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:reviewboard:review_board::::::::
	cpe:2.3:a:reviewboard:review_board::::::::

History

No history.

Information

Published : 2018-03-29 18:29

Updated : 2018-04-24 12:58

NVD link : CVE-2014-5028

Mitre link : CVE-2014-5028

JSON object : View

Products Affected

reviewboard

review_board

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases", "name": "https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4", "name": "https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27", "name": "https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94813", "name": "reviewboard-cve20145028-sec-bypass(94813)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1123692", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1123692", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2014/07/22/12", "name": "[oss-security] 20140722 Re: CVE requests for Review Board", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-5028", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}}, "publishedDate": "2018-03-29T18:29Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:reviewboard:review_board:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.0.4", "versionStartIncluding": "2.0"}, {"cpe23Uri": "cpe:2.3:a:reviewboard:review_board:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.7.27", "versionStartExcluding": "1.7.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-04-24T12:58Z"}