CVE-2014-3521
Fixed in a distro release EPSS 1%
The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.
Products: redhat conga
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 5 | conga | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-81.el5 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-81.el5 |