CVE-2013-0318 : The admin page in the Banckle Chat module for Drupal does not properly restrict

The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors.

Published 2013-03-27 21:55:02

Updated 2013-03-28 04:00:00

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2013-0318

Banckle Chat Project » Banckle Chat » Version: N/A
cpe:2.3:a:banckle_chat_project:banckle_chat:-:*:*:*:*:*:*:*
Matching versions
When used together with: Drupal » Drupal » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2013-0318

EPSS FAQ

0.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-0318

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2013-0318

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-0318

http://www.openwall.com/lists/oss-security/2013/02/21/5

oss-security - Re: CVE request for Drupal Core and contributed modules

CVEs referencing this url
http://drupal.org/node/1916370

Access to this page has been denied.
Vendor Advisory

Jump to

Vulnerability Details : CVE-2013-0318

Products affected by CVE-2013-0318

Exploit prediction scoring system (EPSS) score for CVE-2013-0318

CVSS scores for CVE-2013-0318

CWE ids for CVE-2013-0318

References for CVE-2013-0318