VULNERABILITY INTELLIGENCE

CVE-2014-7180

CVSS score4.6 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2014-10-25
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files.

Primary references