Home > Vulnerability Database > CVE-2013-1814

WhiteSource Vulnerability Database

CVE-2013-1814

Good to know:

Date: March 13, 2013

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.

Language: Java

Severity Score

4.0

Related Resources (4)

Url: http://www.exploit-db.com/exploits/24744/

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-1814

Url: http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-1814

Severity Score

4.0

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Top Fix

Upgrade Version

Upgrade to version org.apache.rave:rave-web:0.21

Learn More

CVSS v2

Base Score:	4.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-1814

Good to know:

Date: March 13, 2013

Language: Java

Severity Score

Related Resources (4)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?