CVE-2014-3521

Red Hat Conga - Authenticated Access Restriction Bypass via Crafted URL

Title source: llm
STIX 2.1

Description

The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1112813
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1194.html

Scores

EPSS 0.0143
EPSS Percentile 70.2%

Details

CWE
CWE-264
Status published
Products (1)
redhat/conga 0.12.2
Published Oct 06, 2014
Tracked Since Feb 18, 2026