What is the CVSS score of CVE-2014-0240?

CVE-2014-0240 has a CVSS 2.0 base score of 6.2 (Medium). CVSS vector: AV:L/AC:H/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.2%.

Mod Wsgi CVE-2014-0240

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2014-05-27 secalert@redhat.com

Privilege Escalation Apache Mod Wsgi

6.2

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.2 MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 27, 2014 - 14:55 cve.org

MEDIUM 6.2

DescriptionCVE.org

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.

AnalysisAI

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain. Rated medium severity (CVSS 6.2). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes. Affected products include: Modwsgi Mod Wsgi. Version information: before 3.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.