CVE-2014-2552 Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.
CriticalCVSS 9.8
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brookinsconsulting collected information export | = 1.1.0 | No fix listed |
References
- bccollected-ezpublish-cve20142552sec-bypass(92129) third-party-advisory vdb-entry
- github.com patch third-party-advisory
- www.trustwave.com third-party-advisory