CVE-2013-2198

Опубликовано: 30 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.

Ссылки

http://www.openwall.com/lists/oss-security/2013/06/20/3
Mailing List
Third Party Advisory
https://drupal.org/node/2023503
Third Party Advisory
https://drupal.org/node/2023507
Third Party Advisory
https://drupal.org/node/2023585
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/06/20/3
Mailing List
Third Party Advisory
https://drupal.org/node/2023503
Third Party Advisory
https://drupal.org/node/2023507
Third Party Advisory
https://drupal.org/node/2023585
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:login_security_project:login_security:*:*:*:*:*:drupal:*:*

Версия от 6.x-1.0 (включая) до 6.x-1.3 (включая)

cpe:2.3:a:login_security_project:login_security:*:*:*:*:*:drupal:*:*

Версия от 7.x-1.0 (включая) до 7.x-1.3 (включая)

cpe:2.3:a:login_security_project:login_security:6.x-1.0:beta1:*:*:*:drupal:*:*

cpe:2.3:a:login_security_project:login_security:6.x-1.0:rc1:*:*:*:drupal:*:*

cpe:2.3:a:login_security_project:login_security:6.x-1.x:dev:*:*:*:drupal:*:*

cpe:2.3:a:login_security_project:login_security:7.x-1.x:dev:*:*:*:drupal:*:*

EPSS

Процентиль: 67%

0.00531

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-863

Связанные уязвимости

GHSA-46hf-hf23-q64q

github

почти 4 года назад