CVE-2014-1930

Visibility Software Cyber Recruiter <8.1.00 - Info Disclosure

Title source: llm
STIX 2.1

Description

Visibility Software Cyber Recruiter before 8.1.00 does not use the appropriate combination of HTTPS transport and response headers to prevent access to (1) AppSelfService.aspx and (2) AgencyPortal.aspx in the browser history, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

References (6)

Core 6
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/566894
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102814
Third Party Advisory x_refsource_misc
http://jvn.jp/vu/JVNVU97441356/index.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65305
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102815

Scores

EPSS 0.0153
EPSS Percentile 71.7%

Details

CWE
CWE-200
Status published
Products (7)
visibility_software/cyber_recruiter 6.2
visibility_software/cyber_recruiter 6.4
visibility_software/cyber_recruiter 6.6
visibility_software/cyber_recruiter 6.8
visibility_software/cyber_recruiter 7.0
visibility_software/cyber_recruiter 7.2
visibility_software/cyber_recruiter < 8.0
Published Feb 10, 2014
Tracked Since Feb 18, 2026