CVE-2014-5130

CVE-2014-5130 describes an information disclosure vulnerability in Avolve Software ProjectDox 8.1, allowing remote authenticated users to access sensitive data belonging to other users through direct access tokens. This medium-severity vulnerability (CVSS 6.5) is easily exploitable over a network with low attack complexity, requiring only low privileges to achieve high confidentiality impact. Despite its age, there is no known exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage, suggesting it has not garnered significant attention.