Lucene search

MitreCVE-2017-6513

HistoryMar 11, 2017 - 6:59 a.m.

CVE-2017-6513

2017-03-1106:59:00

CWE-275

mitre

web.nvd.nist.gov

cve-2017-6513

whmcs

reseller module

softaculous virtualizor

authentication bypass

remote code execution

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.

Affected configurations

Nvd

Node

softaculouswhmcs_reseller_moduleMatch2.0.2

AND

softaculousvirtualizorRange≤2.9.0.6

VendorProductVersionCPE
softaculouswhmcs_reseller_module2.0.2cpe:2.3:a:softaculous:whmcs_reseller_module:2.0.2:*:*:*:*:*:*:*
softaculousvirtualizor*cpe:2.3:a:softaculous:virtualizor:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
softaculous	whmcs_reseller_module	2.0.2	cpe:2.3:a:softaculous:whmcs_reseller_module:2.0.2:::::::*
softaculous	virtualizor	*	cpe:2.3:a:softaculous:virtualizor::::::::

References

www.virtualizor.com/blog/?p=1551

gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

Related for CVE-2017-6513