CVE-2014-125060CWE-287

holdennb CollabCal calenderServer.cpp handleGet improper authentication

High · published January 7, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as b80f6d1893607c99e5113967592417d0fe310ce6. It is recommended to apply a patch to fix this issue. VDB-217614 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00995 · 62.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-01-07T12:44Z
EPSS history
Timeline
  • 07 JAN 12:44Z
    holdennb CollabCal calenderServer.cpp handleGet improper authentication
    cvelistv5