CVE-2014-1946: High severity opendocman vulnerability
OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1946?
CVE-2014-1946 is considered a high severity vulnerability due to its potential for unauthorized privilege escalation.
How do I fix CVE-2014-1946?
To fix CVE-2014-1946, upgrade OpenDocMan to version 1.2.8 or later where this vulnerability is addressed.
What is the impact of CVE-2014-1946?
The impact of CVE-2014-1946 allows authenticated users to escalate their privileges and gain administrative access without authorization.
Who is affected by CVE-2014-1946?
CVE-2014-1946 affects all versions of OpenDocMan up to and including 1.2.7.
What actions can be performed by exploiting CVE-2014-1946?
Exploiting CVE-2014-1946 enables attackers to bypass access restrictions and assign themselves administrative privileges.