{"id":"UBUNTU-CVE-2014-6275","details":"FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk private data in FusionForge.","modified":"2025-07-16T07:32:08.584569Z","published":"2020-01-02T22:15:00Z","withdrawn":"2025-07-18T16:43:04Z","upstream":["CVE-2014-6275"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2014-6275"},{"type":"REPORT","url":"https://lists.fusionforge.org/pipermail/fusionforge-general/2014-September/002824.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2014-6275"}],"affected":[{"package":{"name":"fusionforge","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/fusionforge@6.0.2+20150708-1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2+20150708-1"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"fusionforge","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-common","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-db-local"},{"binary_name":"fusionforge-db-remote","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-lists"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-mta-exim4"},{"binary_name":"fusionforge-mta-postfix","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-admssw","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-authcas","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-authhttpd"},{"binary_name":"fusionforge-plugin-authldap","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-blocks","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-compactpreview","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-contribtracker","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-doaprdf","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-extsubproj","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-foafprofiles","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-globalsearch","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-gravatar","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-headermenu","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-hudson","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-mediawiki","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-message","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-moinmoin","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-projectlabels","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmarch","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmbzr","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmcvs","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmdarcs","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmgit","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-scmhg","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-scmhook"},{"binary_name":"fusionforge-plugin-scmsvn","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"fusionforge-plugin-sysauthldap"},{"binary_name":"fusionforge-plugin-taskboard","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-plugin-webanalytics","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-scm","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-shell","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-web","binary_version":"6.0.2+20150708-1"},{"binary_name":"fusionforge-web-vhosts","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-common","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-db-postgresql","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-db-remote","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-lists-mailman","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-mta-exim4","binary_version":"6.0.2+20150708-1"},{"binary_name":"gforge-mta-postfix","binary_version":"6.0.2+20150708-1"},{"binary_version":"6.0.2+20150708-1","binary_name":"gforge-shell-postgresql"},{"binary_name":"gforge-web-apache2","binary_version":"6.0.2+20150708-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-6275.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"low"}]}