« Volver al listado

CVE-2014-1930

Estado: ModificadaMedia (4.3)—

Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Visibility Software — Cyber Recruiter

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-1930",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-02-10T22:55:03.887",
  "references": [
    {
      "url": "http://jvn.jp/vu/JVNVU97441356/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/102814",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/102815",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/566894",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/65305",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/vu/JVNVU97441356/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/102814",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/102815",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/566894",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/65305",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vspublic.com/help/Cyber%20Recruiter/default.aspx?pageid=release_details",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation."
    },
    {
      "lang": "es",
      "value": "Visibility Software Cyber Recruiter anterior a 8.1.00 no maneja adecuadamente la combinación de cabezeras de transporte y respuesta HTTPS  para prevenir el acceso a (1) AppSelfService.aspx y (2) AgencyPortal.aspx en el historial del navegador, lo que permite a atacantes remotos obtener información sensible mediante el aprovechamiento de una estación de trabajo sin supervisión."
    }
  ],
  "lastModified": "2026-06-17T00:05:46.143",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E219E01-59F5-4AF7-AEE1-48E1F57CC216",
              "versionEndIncluding": "8.0"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "999F78ED-5A81-4CD3-BE92-EAD36781FFFD"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D000435-C3E3-4511-8E94-74CD6A24826C"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACA334AA-0064-4967-B4F2-3678E59813E5"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:6.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACD7E9E4-E187-4FC7-92B9-8C152B323F76"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F875BF2-6BA6-43AD-8F46-EE4B9911F9BC"
            },
            {
              "criteria": "cpe:2.3:a:visibility_software:cyber_recruiter:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D406D9A-ACE3-4FFA-9B33-AB056222BDFB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}