PT-2013-3404 · Apache · Apache Rave

Andreas Guth · Publicado 2013-03-14 · Atualizado 2022-05-17 · CVE-2013-1814

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Rave versions 0.11 through 0.20

Description The issue allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter in the users/get program of the User RPC API. This can lead to the discovery of password hashes in the password field of a response.

Recommendations For Apache Rave versions 0.11 through 0.20, consider restricting access to the users/get program in the User RPC API to minimize the risk of exploitation. As a temporary workaround, avoid using the offset parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-1814

GHSA-428J-Q447-47RW

Produtos afetados

Apache Rave

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/apache_rave_creds.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24744 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html · Exploit
• 🔥 http://exploit-db.com/exploits/24744 · Exploit
• https://github.com/apache/rave/commit/546edbaacfcb7b3fcc81aafe37a5c58e401b66c6 · Nota
• https://github.com/apache/rave · Nota
• https://osv.dev/vulnerability/GHSA-428j-q447-47rw · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1814 · Nota de Segurança
• https://web.archive.org/web/20130512040207/http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html · Nota