Lucene search

[email protected]CVE-2013-7383

HistoryMay 20, 2014 - 2:55 p.m.

CVE-2013-7383

2014-05-2014:55:04

CWE-264

[email protected]

web.nvd.nist.gov

cve-2013-7383

x2gocleansessions

x2go server

remote authenticated users

gain privileges

unspecified vectors

backticks

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.

Affected configurations

NVD

Node

x2gox2go_serverRange≤4.0.0.7

x2gox2go_serverMatch4.0.0.0

x2gox2go_serverMatch4.0.0.1

x2gox2go_serverMatch4.0.0.2

x2gox2go_serverMatch4.0.0.3

x2gox2go_serverMatch4.0.0.4

x2gox2go_serverMatch4.0.0.6

x2gox2go_serverMatch4.0.1.0

x2gox2go_serverMatch4.0.1.1

x2gox2go_serverMatch4.0.1.2

x2gox2go_serverMatch4.0.1.3

x2gox2go_serverMatch4.0.1.4

x2gox2go_serverMatch4.0.1.5

x2gox2go_serverMatch4.0.1.6

x2gox2go_serverMatch4.0.1.7

x2gox2go_serverMatch4.0.1.8

x2gox2go_serverMatch4.0.1.9

CPENameOperatorVersion
x2go:x2go_serverx2go x2go serverle4.0.0.7
x2go:x2go_serverx2go x2go servereq4.0.0.0
x2go:x2go_serverx2go x2go servereq4.0.0.1
x2go:x2go_serverx2go x2go servereq4.0.0.2
x2go:x2go_serverx2go x2go servereq4.0.0.3
x2go:x2go_serverx2go x2go servereq4.0.0.4
x2go:x2go_serverx2go x2go servereq4.0.0.6
x2go:x2go_serverx2go x2go servereq4.0.1.0
x2go:x2go_serverx2go x2go servereq4.0.1.1
x2go:x2go_serverx2go x2go servereq4.0.1.2

CPE	Name	Operator	Version
x2go:x2go_server	x2go x2go server	le	4.0.0.7
x2go:x2go_server	x2go x2go server	eq	4.0.0.0
x2go:x2go_server	x2go x2go server	eq	4.0.0.1
x2go:x2go_server	x2go x2go server	eq	4.0.0.2
x2go:x2go_server	x2go x2go server	eq	4.0.0.3
x2go:x2go_server	x2go x2go server	eq	4.0.0.4
x2go:x2go_server	x2go x2go server	eq	4.0.0.6
x2go:x2go_server	x2go x2go server	eq	4.0.1.0
x2go:x2go_server	x2go x2go server	eq	4.0.1.1
x2go:x2go_server	x2go x2go server	eq	4.0.1.2