Lucene search

[email protected]CVE-2013-2197

HistoryAug 28, 2013 - 10:55 p.m.

CVE-2013-2197

2013-08-2822:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-2197

drupal

denial of service

nvd

security vulnerability

9 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

60.6%

JSON

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service (CPU consumption) via a large number of failed login attempts.

CPENameOperatorVersion
login_security_project:login_securitylogin security project login securityeq6.x-1.0
login_security_project:login_securitylogin security project login securityeq6.x-1.1
login_security_project:login_securitylogin security project login securityeq6.x-1.2
login_security_project:login_securitylogin security project login securityeq6.x-1.3
login_security_project:login_securitylogin security project login securityeq6.x-1.x
login_security_project:login_securitylogin security project login securityeq7.x-1.0
login_security_project:login_securitylogin security project login securityeq7.x-1.1
login_security_project:login_securitylogin security project login securityeq7.x-1.2
login_security_project:login_securitylogin security project login securityeq7.x-1.x

CPE	Name	Operator	Version
login_security_project:login_security	login security project login security	eq	6.x-1.0
login_security_project:login_security	login security project login security	eq	6.x-1.1
login_security_project:login_security	login security project login security	eq	6.x-1.2
login_security_project:login_security	login security project login security	eq	6.x-1.3
login_security_project:login_security	login security project login security	eq	6.x-1.x
login_security_project:login_security	login security project login security	eq	7.x-1.0
login_security_project:login_security	login security project login security	eq	7.x-1.1
login_security_project:login_security	login security project login security	eq	7.x-1.2
login_security_project:login_security	login security project login security	eq	7.x-1.x

References

www.openwall.com/lists/oss-security/2013/06/20/3

drupal.org/node/2023503

drupal.org/node/2023507

drupal.org/node/2023585

9 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

60.6%

JSON

Related for CVE-2013-2197

prion1 drupal1 ibm1