Lucene search

K
nvd[email protected]NVD:CVE-2013-3599
HistorySep 06, 2013 - 11:15 a.m.

CVE-2013-3599

2013-09-0611:15:37
CWE-20
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html.

Affected configurations

NVD
Node
trivantiscoursemill_learning_management_systemMatch6.6
OR
trivantiscoursemill_learning_management_systemMatch6.8

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

Related for NVD:CVE-2013-3599