CVE-2013-1814

CVE-2013-1814 (Apache Rave) affects Apache Rave 0.11–0.20. The vulnerability lies in the User RPC API (users/get): remote authenticated users can disclose sensitive data for all user accounts via the offset parameter, including password hashes. Public references corroborate an information disclos...