Lucene search

K
cve[email protected]CVE-2013-4547
HistoryNov 23, 2013 - 6:55 p.m.

CVE-2013-4547

2013-11-2318:55:04
CWE-116
web.nvd.nist.gov
361
cve-2013-4547
nginx
security vulnerability
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.954 High

EPSS

Percentile

99.4%

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Affected configurations

NVD
Node
f5nginxRange0.8.411.4.4
OR
f5nginxRange1.5.01.5.6
Node
suselifecycle_management_serverMatch1.3
OR
susestudio_onsiteMatch1.3
OR
susewebyastMatch1.3
OR
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.2
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.954 High

EPSS

Percentile

99.4%