Lucene search
PRIOn knowledge basePRION:CVE-2013-1814HistoryMar 14, 2013 - 12:55 a.m.
Design/Logic Flaw
2013-03-1400:55:00
PRIOn knowledge base
www.prio-n.com
2
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.922 High
EPSS
Percentile
98.9%
The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
Related
exploitpack
exploitpack
Apache Rave 0.11 0.20 - User Information Disclosure
2013-03-13 00:00:00
seebug
seebug
Apache Rave 0.11 - 0.20 - User Information Disclosure
2014-07-01 00:00:00
openvas
openvas
Apache Rave User Information Disclosure Vulnerability
2013-03-14 00:00:00
osv
osv
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
cve
cve
CVE-2013-1814
2013-03-14 00:55:00
github
github
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
packetstorm
packetstorm
Apache Rave User Exposure
2013-03-12 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_APACHE_RAVE
2013-03-14 00:55:00
securityvulns
securityvulns
[CVE-2013-1814] Apache Rave exposes User over API
2013-05-06 00:00:00
exploitdb
exploitdb
Apache Rave 0.11 < 0.20 - User Information Disclosure
2013-03-13 00:00:00
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.922 High
EPSS
Percentile
98.9%
Related for PRION:CVE-2013-1814