CVE-2014-2600
Last modified
CVE-2014-2600 is a vulnerability of currently unknown severity. Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hp | Icewall Identity Manager | 4.0 |
| Hp | Icewall Identity Manager | 5.0 |
| Hp | Icewall Sso Password Reset Option | 10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-2600?
How severe is CVE-2014-2600?
How do I fix CVE-2014-2600?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-2592Unrestricted file upload vulnerability in Aruba Web Manageme…
- CVE-2014-2593The management console in Aruba Networks ClearPass Policy Ma…
- CVE-2014-2595Barracuda Web Application Firewall (WAF) 7.8.1.013 allows re…9.8
- CVE-2014-2597PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users …
- CVE-2014-2598Cross-site request forgery (CSRF) vulnerability in the Quick…
- CVE-2014-2599The HVMOP_set_mem_access HVM control operations in Xen 4.1.x…
- CVE-2014-2601The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 an…
- CVE-2014-2602Unspecified vulnerability in HP OneView 1.0 and 1.01 allows …
- CVE-2014-2603Unspecified vulnerability on HP 8/20q switches, SN6000 switc…
- CVE-2014-2604Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and Ice…
- CVE-2014-2605Unspecified vulnerability in HP StoreVirtual 4000 Storage an…
- CVE-2014-2606Unspecified vulnerability in HP StoreVirtual 4000 Storage an…
Are you affected by CVE-2014-2600?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST