Security Advisory

CVE-2014-9702

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-01 16:56:02

Last updated 2024-08-06 13:55:04

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information (username and password) via any request, such as a password reset request.

← Browse all CVEs View on cve.org ↗