Lucene search
HistoryMar 14, 2013 - 12:55 a.m.
CVE-2013-1814
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.921 High
EPSS
Percentile
98.9%
The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
Affected configurations
Node
apacheraveMatch0.11
ORapacheraveMatch0.12
ORapacheraveMatch0.13
ORapacheraveMatch0.14
ORapacheraveMatch0.15
ORapacheraveMatch0.16
ORapacheraveMatch0.17
ORapacheraveMatch0.18
ORapacheraveMatch0.19
ORapacheraveMatch0.20
Related
osv
osv
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
cve
cve
CVE-2013-1814
2022-10-03 16:14:48
github
github
Apache Rave information disclosure vulnerability
2022-05-17 05:07:50
exploitpack
exploitpack
Apache Rave 0.11 0.20 - User Information Disclosure
2013-03-13 00:00:00
seebug
seebug
Apache Rave 0.11 - 0.20 - User Information Disclosure
2014-07-01 00:00:00
prion
prion
Design/Logic Flaw
2013-03-14 00:55:00
openvas
openvas
Apache Rave User Information Disclosure Vulnerability
2013-03-14 00:00:00
securityvulns
securityvulns
[CVE-2013-1814] Apache Rave exposes User over API
2013-05-06 00:00:00
packetstorm
packetstorm
Apache Rave User Exposure
2013-03-12 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_APACHE_RAVE
2013-03-14 00:55:00
cvelist
cvelist
CVE-2013-1814
2022-10-03 16:14:48
exploitdb
exploitdb
Apache Rave 0.11 < 0.20 - User Information Disclosure
2013-03-13 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.921 High
EPSS
Percentile
98.9%
Related for NVD:CVE-2013-1814