CVE-2014-2862 Information

Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations which allows remote authenticated users to perform actions via unknown vectors.

Reference

http://www.kb.cert.org/vuls/id/437385