Lucene search
HistoryJun 13, 2014 - 2:55 p.m.
CVE-2013-2182
cve-2013-2182
mandril
monkey http daemon
monkeyd
security plugin
access restrictions
encoded forward slash
nvd
6.8 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.077 Low
EPSS
Percentile
94.2%
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Affected configurations
Node
monkey-projectmonkeyRange≤1.4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| monkey-project:monkey | monkey-project monkey | le | 1.4.0 |
Related
prion
prion
Authentication flaw
2014-06-13 14:55:00
ubuntucve
ubuntucve
CVE-2013-2182
2014-06-13 00:00:00
cvelist
cvelist
CVE-2013-2182
2014-06-13 14:00:00
nvd
nvd
CVE-2013-2182
2014-06-13 14:55:12
6.8 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.077 Low
EPSS
Percentile
94.2%
Related for CVE-2013-2182