CVE-2014-1908: Infoleak
The error-handling feature in (1) bp.php, (2) videowhisperstreaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1908?
CVE-2014-1908 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2014-1908?
To mitigate CVE-2014-1908, update the VideoWhisper Live Streaming Integration plugin to version 4.29.5 or later.
What vulnerability is associated with error-handling in VideoWhisper Live Streaming Integration?
CVE-2014-1908 allows remote attackers to obtain sensitive information through improper error handling.
Which versions of VideoWhisper Live Streaming Integration are affected by CVE-2014-1908?
CVE-2014-1908 affects versions of VideoWhisper Live Streaming Integration up to 4.27.4.
What files are involved in the CVE-2014-1908 vulnerability?
The vulnerability involves the files bp.php, videowhisper_streaming.php, and ls/rtmp.inc.php.