CVE-2013-4963
Published Mar 14, 2014
Last updated 5 years ago
Overview
- Description
- Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "816D363E-4782-4977-9E52-94189E0AEB60",
"versionEndIncluding": "3.0.0"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "926CFE0B-57A0-42EE-8B84-5C53C94F552E"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54836761-86C0-4240-8A43-D6DECC2BBBDA"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A584D14-197E-47EB-B394-B8B211D4B502"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCFA5742-38F2-43BD-9C90-E4F447F55684"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1389B834-FE5B-4CF7-93CC-63E919FC58CE"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8A8C568-1922-4701-BA61-DF960C43A6FD"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA319274-7ADF-483A-8F82-8D5E115D804D"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32A5E42D-9626-4FC8-A032-4CD4FA1255BF"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06F0697C-A1BF-42FE-A036-F3E6FAB30A87"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C43CD3C-ACDB-418B-B67D-9C8EFAC0680C"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD8F80AD-1E8E-40BE-883D-6F7F61D4A274"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C6E27BB-6444-49E2-8B89-D7E09284D29C"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_enterprise:2.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43841CE7-ECAC-43FE-935A-478EA413BDF1"
}
],
"operator": "OR"
}
]
}
]