Lucene search
HistoryMar 14, 2013 - 12:55 a.m.
CVE-2013-1814
apache rave
user rpc api
cve-2013-1814
information security
password hashes
user accounts
remote authentication
nvd
5.7 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.923 High
EPSS
Percentile
98.9%
The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
Related
prion
prion
Design/Logic Flaw
2013-03-14 00:55:00
exploitpack
exploitpack
Apache Rave 0.11 0.20 - User Information Disclosure
2013-03-13 00:00:00
seebug
seebug
Apache Rave 0.11 - 0.20 - User Information Disclosure
2014-07-01 00:00:00
openvas
openvas
Apache Rave User Information Disclosure Vulnerability
2013-03-14 00:00:00
osv
osv
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
github
github
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
packetstorm
packetstorm
Apache Rave User Exposure
2013-03-12 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_APACHE_RAVE
2013-03-14 00:55:00
securityvulns
securityvulns
[CVE-2013-1814] Apache Rave exposes User over API
2013-05-06 00:00:00
exploitdb
exploitdb
Apache Rave 0.11 < 0.20 - User Information Disclosure
2013-03-13 00:00:00
5.7 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.923 High
EPSS
Percentile
98.9%
Related for CVE-2013-1814