CVE-2014-1908: Infoleak
First published: Mon Dec 29 2014(Updated: )
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VideoWhisper Live Streaming Integration | <=4.27.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-1908?
CVE-2014-1908 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2014-1908?
To mitigate CVE-2014-1908, update the VideoWhisper Live Streaming Integration plugin to version 4.29.5 or later.
What vulnerability is associated with error-handling in VideoWhisper Live Streaming Integration?
CVE-2014-1908 allows remote attackers to obtain sensitive information through improper error handling.
Which versions of VideoWhisper Live Streaming Integration are affected by CVE-2014-1908?
CVE-2014-1908 affects versions of VideoWhisper Live Streaming Integration up to 4.27.4.
What files are involved in the CVE-2014-1908 vulnerability?
The vulnerability involves the files bp.php, videowhisper_streaming.php, and ls/rtmp.inc.php.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/videowhisper
- canonical/videowhisper live streaming integration
- version/videowhisper live streaming integration/4.27.4