NVD

Id
40016  
Name
CVE-2013-4404  
Description
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-23  
Modified Date
2014-01-13  
Seq
2013-4404  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203601 40016 CVE-2013-4404 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=995038  View
203602 40016 CVE-2013-4404 RHSA-2013:1851  View
203603 40016 CVE-2013-4404 RHSA-2013:1852  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24115 JVNDB-2013-005690 Red Hat Enterprise MRG Grid の cumin におけるロールの制限を回避される脆弱性 Red Hat Enterprise MRG Grid の cumin は、ユーザロールを適切に処理しないため、ロールの制限を回避され、重要な情報を取得される、または特権操作を実行される脆弱性が存在します。 CVE-2013-4404 64346 CVE-2013-4404 40016 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005690.html 2013-12-17 2013-12-25 View