VDB

GCVE-110-CERTCC-2014-595884

GCVE-110-CERTCC-2014-595884
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published June 8, 2015
Aptexx Resident Anywhere does not require authentication to view and modify sensitive information contained in direct account and payment URLs, which can be leveraged to bypass authentication and access user accounts.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.8remediation_levelUreport_confidenceCenvironmental_score2.01042897752125target_distributionLenvironmental_vectorCDP:MH/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-4882

Transitive aliases

GSD-2014-4882GHSA-p895-j5w4-hwmpCNVD-2015-03891

References

Aptexx Resident Anywhere exposes sensitive account information
advisory
Aptexx Resident Anywhere exposes sensitive account information
url
Aptexx Resident Anywhere exposes sensitive account information
url

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›