PT-2013-3404 · Apache · Apache Rave

Andreas Guth · Published 2013-03-14 · Updated 2022-05-17 · CVE-2013-1814

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Rave versions 0.11 through 0.20

Description The issue allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter in the users/get program of the User RPC API. This can lead to the discovery of password hashes in the password field of a response.

Recommendations For Apache Rave versions 0.11 through 0.20, consider restricting access to the users/get program in the User RPC API to minimize the risk of exploitation. As a temporary workaround, avoid using the offset parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-1814

GHSA-428J-Q447-47RW

Affected Products

Apache Rave

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/apache_rave_creds.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24744 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html · Exploit
• 🔥 http://exploit-db.com/exploits/24744 · Exploit
• https://osv.dev/vulnerability/GHSA-428j-q447-47rw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1814 · Security Note
• https://github.com/apache/rave/commit/546edbaacfcb7b3fcc81aafe37a5c58e401b66c6 · Note
• https://github.com/apache/rave · Note
• https://web.archive.org/web/20130512040207/http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html · Note