Lucene search
RedhatCVE-2013-2182HistoryJun 13, 2014 - 2:55 p.m.
CVE-2013-2182
2014-06-1314:55:12
CWE-264
redhat
web.nvd.nist.gov
22
cve-2013-2182
mandril
monkey http daemon
monkeyd
security plugin
access restrictions
encoded forward slash
nvd
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.074
Percentile
94.2%
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Affected configurations
Node
monkey-projectmonkeyRange≤1.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| monkey-project | monkey | * | cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-2182
2014-06-13 00:00:00
prion
prion
Authentication flaw
2014-06-13 14:55:00
exploitdb
exploitdb
Monkey HTTP Daemon Mandril Security Plugin - Security Bypass
2013-06-14 00:00:00
nvd
nvd
CVE-2013-2182
2014-06-13 14:55:12
cvelist
cvelist
CVE-2013-2182
2014-06-13 14:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.074
Percentile
94.2%
Related for CVE-2013-2182