Lucene search

K
cvelistRedhatCVELIST:CVE-2013-1814
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1814

2022-10-0316:14:48
redhat
www.cve.org
2
apache rave
user rpc api
user accounts
sensitive information
remote authentication
password hashes

5.7 Medium

AI Score

Confidence

Low

0.921 High

EPSS

Percentile

98.9%

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.

5.7 Medium

AI Score

Confidence

Low

0.921 High

EPSS

Percentile

98.9%