← CVE Intelligence

CVE-2014-2356

Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor PUBLISHED

Description (CNA)

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Affected (CNA)

Vendor / productVersions
Innominate / mGuardaffected 4.0.0 through 8.0.2; unaffected 7.6.4; unaffected 8.0.3; unaffected 8.1.0; unaffected 8.1.1

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.