CVE-2014-6047: Medium severity phpmyfaq vulnerability
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6047?
CVE-2014-6047 is considered a moderate severity vulnerability due to the potential for unauthorized access to sensitive data.
How do I fix CVE-2014-6047?
To fix CVE-2014-6047, upgrade phpMyFAQ to version 2.8.13 or later to ensure proper permission checks.
Who is affected by CVE-2014-6047?
CVE-2014-6047 affects phpMyFAQ versions prior to 2.8.13, allowing remote authenticated users with certain permissions to exploit the vulnerability.
What type of vulnerability is CVE-2014-6047?
CVE-2014-6047 is a security vulnerability related to improper authentication checks for downloading attachments.
Can CVE-2014-6047 be exploited remotely?
Yes, CVE-2014-6047 can be exploited remotely by authenticated users taking advantage of the flawed permission checks.