CVE-2014-5128 Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iii encore discovery solution | = 4.3 | No fix listed |
References
- packetstormsecurity.com
- 20140827 Encore Discovery Solution Multiple Vulnerability Disclosure mailing-list
- 69431 vdb-entry
- encore-discovery-cve20145128-info-disc(95570) vdb-entry