CVE-2014-6276

schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to…

published April 13, 2016

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01548 · 74.8th percentile
Published
2016-04-13T14:00Z
EPSS history
Timeline
  • 13 APR 14:00Z
    schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to…
    cvelistv5