PT-2013-5001 · Red Hat · Red Hat Enterprise Mrg Grid

Publicado

2013-12-23

·

Atualizado

2021-07-15

·

CVE-2013-4404

CVSS v2.0

6.5

Média

VetorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG Grid version 2.4
Description The issue allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations.
Recommendations For Red Hat Enterprise MRG Grid version 2.4, consider restricting access to sensitive information and privileged operations until a fix is available. As a temporary workaround, review and enforce user roles manually to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4404
RHSA-2013:1851
RHSA-2013:1852

Produtos afetados

Red Hat Enterprise Mrg Grid