CVE-2014-4721

CVE-2014-4721 is a type confusion vulnerability in the phpinfo implementation of PHP versions before 5.4.30 and 5.5.14, affecting Debian Linux and PHP installations. Attackers could exploit this by manipulating PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, or PHP_SELF variables with integer data types instead of strings, potentially leading to sensitive information disclosure from process memory, such as private SSL keys in Apache environments. The vulnerability has a low severity CVSS score of 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N), indicating network access, high attack complexity, and partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.