Vulnerability Details : CVE-2013-4411
Review Board: URL processing gives unauthorized users access to review lists
Products affected by CVE-2013-4411
- cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:reviewboard:*:*:*:*:*:*:*:*
- cpe:2.3:a:reviewboard:reviewboard:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-4411
0.24%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 61 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-4411
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
4.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
NIST |
CWE ids for CVE-2013-4411
-
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-4411
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html
[SECURITY] Fedora 19 Update: python-djblets-0.7.21-1.fc19Mailing List;Third Party Advisory
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html
[SECURITY] Fedora 20 Update: python-djblets-0.7.21-1.fc20Mailing List;Third Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4411
1016599 – (CVE-2013-4411) CVE-2013-4411 ReviewBoard: URL processing allows unauthorized users to view review listsIssue Tracking;Third Party Advisory
-
https://access.redhat.com/security/cve/cve-2013-4411
Red Hat Customer Portal - Access to 24x7 support and knowledgeBroken Link
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html
[SECURITY] Fedora 18 Update: ReviewBoard-1.7.16-2.fc18Mailing List;Third Party Advisory
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html
[SECURITY] Fedora 19 Update: ReviewBoard-1.7.16-2.fc19Mailing List;Third Party Advisory
-
https://security-tracker.debian.org/tracker/CVE-2013-4411
CVE-2013-4411Third Party Advisory
-
http://www.securityfocus.com/bid/63023
Review Board CVE-2013-4411 Remote Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html
[SECURITY] Fedora 18 Update: python-djblets-0.7.21-1.fc18Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/88061
ReviewBoard dashboard URL security bypass CVE-2013-4411 Vulnerability ReportThird Party Advisory;VDB Entry
Jump to