CVE-2013-5356

Loading...

General

Score:7.5/10.0
Severity:High
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:Partial

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:None

Published on 13/06/14 - Updated on 29/08/17

Description

Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2013-5356

Exploits

SecurityFocusBID-64102

Relative technologies

VendorProduct
sharetronixsharetronix

Share this vulnerability with:

Twitter Facebook LinkedIn Mail