CVE-2014-1217

Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the…

published April 28, 2014

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01527 · 74.5th percentile
Published
2014-04-28T14:00Z
EPSS history
Timeline
  • 28 APR 14:00Z
    Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the…
    cvelistv5