CVE-2013-4404
published 2013-12-23CVE-2013-4404: cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and…
PriorityP428medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
1.88%
77.3th percentile
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_mrg | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
cumin: missing authorization checks in forms, charts, and csv export widgets
vendor_redhat·2013-12-17·CVSS 6.5
CVE-2013-4404 [MEDIUM] cumin: missing authorization checks in forms, charts, and csv export widgets
cumin: missing authorization checks in forms, charts, and csv export widgets
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors.
GHSA
GHSA-445m-x6rq-hhpx: cumin in Red Hat Enterprise MRG Grid 2
ghsa_unreviewed·2022-05-13
CVE-2013-4404 [MEDIUM] GHSA-445m-x6rq-hhpx: cumin in Red Hat Enterprise MRG Grid 2
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=995038http://rhn.redhat.com/errata/RHSA-2013-1851.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1852.htmlhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=995038http://rhn.redhat.com/errata/RHSA-2013-1851.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1852.html
2013-12-23
Published