CVE

Id
64287  
CVE No.
CVE-2013-4340  
Status
Candidate  
Description
wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user_ID parameter.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634110 64287 CVE-2013-4340 CONFIRM:http://codex.wordpress.org/Version_3.6.1  View
634111 64287 CVE-2013-4340 CONFIRM:http://core.trac.wordpress.org/changeset/25321  View
634112 64287 CVE-2013-4340 CONFIRM:http://wordpress.org/news/2013/09/wordpress-3-6-1/  View
634113 64287 CVE-2013-4340 DEBIAN:DSA-2757  View
634114 64287 CVE-2013-4340 URL:http://www.debian.org/security/2013/dsa-2757  View
634115 64287 CVE-2013-4340 FEDORA:FEDORA-2013-16855  View
634116 64287 CVE-2013-4340 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html  View
634117 64287 CVE-2013-4340 FEDORA:FEDORA-2013-16895  View
634118 64287 CVE-2013-4340 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117118.html  View
634119 64287 CVE-2013-4340 FEDORA:FEDORA-2013-16925  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23016 JVNDB-2013-004591 Linux Kernel の crypto/ansi_cprng.c の get_prng_bytes 関数における暗号保護メカニズムを破られる脆弱性 Linux Kernel の crypto/ansi_cprng.c の get_prng_bytes 関数には、一つずれエラー (Off-by-One error) により、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2013-4345 64287 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004591.html  View