CVE-2014-6049: Medium severity phpmyfaq vulnerability
Published Aug 28, 2018
·Updated
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.
Affected Software
1 affected component
PhpMyFaq phpmyfaq<2.8.13
Event History
Aug 28, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6049?
CVE-2014-6049 is classified as a high severity vulnerability due to its potential for unauthorized access by authenticated users with admin privileges.
2
How do I fix CVE-2014-6049?
To fix CVE-2014-6049, upgrade your phpMyFAQ installation to version 2.8.13 or later.
3
Who is affected by CVE-2014-6049?
CVE-2014-6049 affects instances of phpMyFAQ versions prior to 2.8.13 that allow remote authenticated users with admin privileges.
4
What type of attack does CVE-2014-6049 facilitate?
CVE-2014-6049 facilitates authorization bypass attacks, potentially allowing privileged actions without proper authentication.
5
When was CVE-2014-6049 reported?
CVE-2014-6049 was reported on September 16, 2014.