medium5.8Public exploit code
CVE-2013-6492
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedHat Piranha - Remote Security Bypass2013-12-11 · remote · linux · Verified
Impact
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ryan Ohara | Piranha | Version 0.8.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.centos.org/view.php?id=6825
- http://rhn.redhat.com/errata/RHSA-2014-0174.html
- http://rhn.redhat.com/errata/RHSA-2014-0175.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1043040
- http://bugs.centos.org/view.php?id=6825
- http://rhn.redhat.com/errata/RHSA-2014-0174.html
- http://rhn.redhat.com/errata/RHSA-2014-0175.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1043040