CVE-2013-3599

2022-10-0316:14:44

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-3599

coursemill

lms

userlogin.jsp

privilege escalation

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.2%

JSON

userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html.

Affected configurations

NVD

Node

trivantiscoursemill_learning_management_systemMatch6.6

trivantiscoursemill_learning_management_systemMatch6.8

CPENameOperatorVersion
trivantis:coursemill_learning_management_systemtrivantis coursemill learning management systemeq6.6
trivantis:coursemill_learning_management_systemtrivantis coursemill learning management systemeq6.8

CPE	Name	Operator	Version
trivantis:coursemill_learning_management_system	trivantis coursemill learning management system	eq	6.6
trivantis:coursemill_learning_management_system	trivantis coursemill learning management system	eq	6.8