CVE-2014-3928

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-04-03

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Lg (Lg Project)

References

• http://www.s3.eurecom.fr/cve/CVE-2014-3928.txt
• https://github.com/Cougar/lg/issues/4
• https://hackerone.com/reports/16330