VDB

GCVE-110-CERTCC-2014-693036

GCVE-110-CERTCC-2014-693036
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published September 30, 2015
Datalex provides a suite of software offerings for the airline industry which supports a customizable flight browsing, booking, payment, and analytics. The Datalex airline booking software contained an error in its error handling routines which allows authorization bypass and loss of confidentiality for arbitrary users.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.8/10
High · AV:N/AC:L/Au:N/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.4remediation_levelOFreport_confidenceCenvironmental_score6.43545140112target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-2858

References

Datalex airline booking software allowed authorization bypass for arbitrary users
advisory
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url
Datalex airline booking software allowed authorization bypass for arbitrary users
url

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›