Lucene search
MitreCVE-2013-2747HistoryJan 29, 2014 - 6:55 p.m.
CVE-2013-2747
2014-01-2918:55:26
CWE-264
mitre
web.nvd.nist.gov
33
cve-2013-2747
courion
access risk management suite
password reset
remote authentication
internet explorer
file system
command prompt
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.003
Percentile
69.2%
The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a command prompt.
Affected configurations
Node
courionaccess_risk_management_suiteMatch8.09
| Vendor | Product | Version | CPE |
|---|---|---|---|
| courion | access_risk_management_suite | 8.0 | cpe:2.3:a:courion:access_risk_management_suite:8.0:9:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2013-2747
2014-01-29 18:55:26
prion
prion
Design/Logic Flaw
2014-01-29 18:55:00
cvelist
cvelist
CVE-2013-2747
2014-01-29 18:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.003
Percentile
69.2%
Related for CVE-2013-2747