CVE-2013-4404

cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors...

CVE-2013-4404

CVE-2013-4404 affects cumin in Red Hat Enterprise MRG Grid 2.4, where user roles are not properly enforced. This allows remote authenticated users to bypass role restrictions and access privileged information or perform privileged operations via unspecified vectors (impact described as partial co...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4404. Reason: This candidate is a reservation duplicate of CVE-2013-4404. Notes: All CVE users should reference CVE-2013-4404 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2013-4403

CVE-2013-4404 affects cumin in Red Hat Enterprise MRG Grid 2.4. It does not properly enforce user roles, allowing remote authenticated users to bypass role restrictions and access sensitive information or perform privileged operations. Remediation per Red Hat advisories RHSA-2013:1851/1852 is to ...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update

An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Fedora Update for moin FEDORA-2013-0640

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2013-0640 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for moin FEDORA-2013-0685

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2013-0685 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for moin FEDORA-2013-0685

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for moin USN-1604-1

Ubuntu Update for Linux kernel vulnerabilities USN-1604-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16041.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for moin USN-1604-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : moin vulnerabilities (USN-1604-1)

It was discovered that MoinMoin did not properly sanitize certain input, resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to...

Fedora Update for moin FEDORA-2012-13400

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2012-13400 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora 18 : moin-1.9.4-3.fc18 (2012-13528)

Fix CVE-2012-4404 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Fedora 17 : moin-1.9.4-3.fc17 (2012-13408)

Fix CVE-2012-4404 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Debian Security Advisory DSA 2538-1 (moin)

The remote host is missing an update to moin announced via advisory DSA 2538-1. OpenVAS Vulnerability Test $Id: deb25381.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2538-1 moin Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-4404

CVE-2012-4404 affects MoinMoin 1.9 through 1.9.4, where security/init .py mishandles group names containing virtual groups (e.g., All, Known, Trusted). This allows remote authenticated users with virtual group membership to be treated as group members, constituting an access-control vulnerability...

CVE-2012-4404

Removed by vendor...

[SECURITY] [DSA 2538-1] moin security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2538-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 05, 2012 http://www.debian.org/security/faq -...

FreeBSD Ports: moinmoin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 2538-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2538-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 05, 2012 http://www.debian.org/security/faq -...

VMware vCenter Update Manager Directory Traversal (VMSA-2011-0014)

The version of Jetty web server included with VMware vCenter Update Manager on the remote host has a directory traversal vulnerability. This is a variant of the issue previously addressed by VMware advisory VMSA-2010-0012. The web server runs as SYSTEM by default. A remote, unauthenticated attack...