CVE-2021-20114

High

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/…

tenable·CWE-425·Published 2021-07-29

CVSS

7.5

EPSS

0.06

KEV

Exploits

cve.orgen

193 chars

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.

NVDen

193 chars

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.

Cuando fue instalado siguiendo la configuración predeterminada y recomendada, TCExam versiones anteriores a 14.8.1 incluyéndola, permitía a usuarios no autenticados acceder al directorio /cache/backup/, que incluía archivos confidenciales de copia de seguridad de la base de datos

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N