Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1814
apache rave
user rpc api
cve-2013-1814
information security
password hashes
user accounts
remote authentication
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.921 High
EPSS
Percentile
99.0%
The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
Affected configurations
Node
apacheraveMatch0.11
ORapacheraveMatch0.12
ORapacheraveMatch0.13
ORapacheraveMatch0.14
ORapacheraveMatch0.15
ORapacheraveMatch0.16
ORapacheraveMatch0.17
ORapacheraveMatch0.18
ORapacheraveMatch0.19
ORapacheraveMatch0.20
Related
openvas
openvas
Apache Rave User Information Disclosure Vulnerability
2013-03-14 00:00:00
nvd
nvd
CVE-2013-1814
2013-03-14 00:55:01
exploitpack
exploitpack
Apache Rave 0.11 0.20 - User Information Disclosure
2013-03-13 00:00:00
seebug
seebug
Apache Rave 0.11 - 0.20 - User Information Disclosure
2014-07-01 00:00:00
prion
prion
Design/Logic Flaw
2013-03-14 00:55:00
osv
osv
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
github
github
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
securityvulns
securityvulns
[CVE-2013-1814] Apache Rave exposes User over API
2013-05-06 00:00:00
cvelist
cvelist
CVE-2013-1814
2022-10-03 16:14:48
packetstorm
packetstorm
Apache Rave User Exposure
2013-03-12 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_APACHE_RAVE
2013-03-14 00:55:00
exploitdb
exploitdb
Apache Rave 0.11 < 0.20 - User Information Disclosure
2013-03-13 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.921 High
EPSS
Percentile
99.0%
Related for CVE-2013-1814