VULNERABILITY INTELLIGENCE

CVE-2014-2871

CVSS score5 MEDIUM
EPSS probability1.96%
CISA KEVNot currently listed
Published2014-04-15
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references