CVE-2014-7984: High severity Joomla Joomla\! vulnerability
Published Oct 8, 2014
·Updated
Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication.
Affected Software
34 affected components
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=2.5.10
Joomla Joomla\!=2.5.11
Joomla Joomla\!=2.5.12
Joomla Joomla\!=2.5.13
Joomla Joomla\!=2.5.14
Joomla Joomla\!=2.5.15
Joomla Joomla\!=2.5.16
Joomla Joomla\!=2.5.17
Joomla Joomla\!=2.5.18
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Event History
Oct 8, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7984?
CVE-2014-7984 is classified as a medium severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2014-7984?
To fix CVE-2014-7984, update Joomla! to version 2.5.19 or 3.2.3 or later.
3
What systems are affected by CVE-2014-7984?
CVE-2014-7984 affects Joomla! versions 2.5.x before 2.5.19 and 3.x before 3.2.3.
4
What type of vulnerability is CVE-2014-7984?
CVE-2014-7984 is an authentication bypass vulnerability that allows remote attackers to gain unauthorized access.
5
What can happen if CVE-2014-7984 is exploited?
If exploited, CVE-2014-7984 allows an attacker to authenticate and bypass intended authentication restrictions.