Vulnerability Details CVE-2014-5028
The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information from repository files by leveraging knowledge of database ids.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- http://www.openwall.com/lists/oss-security/2014/07/22/12
- https://bugzilla.redhat.com/show_bug.cgi?id=1123692
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94813
- https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
- https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4
- https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases
- http://www.openwall.com/lists/oss-security/2014/07/22/12
- https://bugzilla.redhat.com/show_bug.cgi?id=1123692
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94813
- https://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.27
- https://www.reviewboard.org/docs/releasenotes/reviewboard/2.0.4
- https://www.reviewboard.org/news/2014/07/22/review-board-1-7-27-and-2-0-3-security-releases
Products affected by CVE-2014-5028
-
cpe:2.3:a:reviewboard:review_board:1.7.0.1
-
cpe:2.3:a:reviewboard:review_board:1.7.1
-
cpe:2.3:a:reviewboard:review_board:1.7.10
-
cpe:2.3:a:reviewboard:review_board:1.7.11
-
cpe:2.3:a:reviewboard:review_board:1.7.12
-
cpe:2.3:a:reviewboard:review_board:1.7.13
-
cpe:2.3:a:reviewboard:review_board:1.7.14
-
cpe:2.3:a:reviewboard:review_board:1.7.15
-
cpe:2.3:a:reviewboard:review_board:1.7.16
-
cpe:2.3:a:reviewboard:review_board:1.7.17
-
cpe:2.3:a:reviewboard:review_board:1.7.18
-
cpe:2.3:a:reviewboard:review_board:1.7.19
-
cpe:2.3:a:reviewboard:review_board:1.7.2
-
cpe:2.3:a:reviewboard:review_board:1.7.20
-
cpe:2.3:a:reviewboard:review_board:1.7.21
-
cpe:2.3:a:reviewboard:review_board:1.7.22
-
cpe:2.3:a:reviewboard:review_board:1.7.23
-
cpe:2.3:a:reviewboard:review_board:1.7.24
-
cpe:2.3:a:reviewboard:review_board:1.7.25
-
cpe:2.3:a:reviewboard:review_board:1.7.26
-
cpe:2.3:a:reviewboard:review_board:1.7.3
-
cpe:2.3:a:reviewboard:review_board:1.7.4
-
cpe:2.3:a:reviewboard:review_board:1.7.5
-
cpe:2.3:a:reviewboard:review_board:1.7.6
-
cpe:2.3:a:reviewboard:review_board:1.7.7
-
cpe:2.3:a:reviewboard:review_board:1.7.8
-
cpe:2.3:a:reviewboard:review_board:1.7.9
-
cpe:2.3:a:reviewboard:review_board:2.0
-
cpe:2.3:a:reviewboard:review_board:2.0.1
-
cpe:2.3:a:reviewboard:review_board:2.0.2
-
cpe:2.3:a:reviewboard:review_board:2.0.3