Lucene search

K
nginxNginxNGINX:CVE-2013-4547
HistoryNov 23, 2013 - 6:55 p.m.

Request line parsing vulnerability

2013-11-2318:55:04
mailman.nginx.org
190

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.954

Percentile

99.4%

Request line parsing vulnerability
Severity: medium
CVE-2013-4547
Not vulnerable: 1.5.7+, 1.4.4+
Vulnerable: 0.8.41-1.5.6

Affected configurations

Vulners
Node
f5nginxRange0.8.411.5.6
VendorProductVersionCPE
f5nginx*cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.954

Percentile

99.4%