Skip to content
Sign in
4.3 Not rated

CVE-2014-2356 Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows…

Description

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Affected products and versions

Product Affected versions Fixed in
mGuard 8.1 earliest → < 8.1.0 8.1.0
mGuard 8.0 earliest → < 8.0.3 8.0.3
mGuard 7.6 earliest → < 7.6.4 7.6.4
mGuard 4.0 4.0.0 → 8.0.2 No fix stated

Other CVEs of mGuard

The 2 CVEs of mGuard →
CVE-2014-9193 Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root… 8.5 Not rated
Track this CVE