NVD

Id
41672  
Name
CVE-2013-6788  
Description
The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-05-30  
Modified Date
2014-06-26  
Seq
2013-6788  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210750 41672 CVE-2013-6788 http://www.bitrixsoft.com/products/cms/versions.php?module=sale  View
210751 41672 CVE-2013-6788 63606  View
210752 41672 CVE-2013-6788 https://www.htbridge.com/advisory/HTB23183  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24964 JVNDB-2013-006539 Bitrix Site Manager 用 Bitrix e-Store モジュールにおける Cookie の値を推測される脆弱 Bitrix Site Manager 用 Bitrix e-Store モジュールは、BITRIX_SM_SALE_UID の Cookie に連続した値を使用するため、Cookie の値を推測され、認証を回避される脆弱性が存在します。 CVE-2013-6788 66730 CVE-2013-6788 41672 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006539.html 2013-11-12 2014-06-03 View