CVE Catalog

CVE-2014-3929

High
Published: Translated: NVD NIST

Summary

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

Risk Assessment

The organization may be exposed to the theft of SSH keys, potentially leading to the compromise of systems and data.

Recommendation

It is recommended to review and modify the configuration to ensure proper access control to sensitive information and to move it outside the web root.

Other vulnerabilities in Cougar-LG

Original NVD description (English source)

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS