CVE-2013-5356 in Sharetronix

Resumen

por MITRE

Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2013-08-21
• Divulgación: 2014-06-13
• Moderación: aceptado
• Artículo: VDB-70040
• CPE: listo
• CWE: CWE-264 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01698
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5356
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5356
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5356/