NVD

Id
38213  
Name
CVE-2013-2113  
Description
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-07-31  
Modified Date
2013-08-06  
Seq
2013-2113  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195380 38213 CVE-2013-2113 http://projects.theforeman.org/issues/2630  View
195381 38213 CVE-2013-2113 RHSA-2013:0995  View
195382 38213 CVE-2013-2113 https://bugzilla.redhat.com/show_bug.cgi?id=968166  View
195383 38213 CVE-2013-2113 https://groups.google.com/forum/#!topic/foreman-users/6WpO_3ugiXU  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22027 JVNDB-2013-003602 Foreman の app/controllers/users_controller.rb の create メソッドにおける権限を取得される脆弱性 Foreman の app/controllers/users_controller.rb の create メソッドには、権限を取得される脆弱性が存在します。 CVE-2013-2113 62055 CVE-2013-2113 38213 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003602.html 2013-06-07 2013-08-02 View