CVE-2014-9575

CVE-2014-9575 describes an authentication bypass vulnerability in VDG Security SENSE (formerly DIVA) versions prior to 2.3.15. Attackers can exploit this flaw by encoding a colon character in the HTTP Authorization header, enabling them to read and modify arbitrary plugin settings. With a CVSS score of 6.4, this vulnerability is of medium severity, allowing unauthenticated remote attackers to compromise confidentiality and integrity with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.