Unscored severity · published Dec 23, 2013
CVE-2013-4404
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive…
–
CVSS
1.9%
EPSS
No
On KEV
Description
cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Mrg · Redhat
2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4404
bugzilla.redhat.com
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=995038
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1851.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-1852.html
More from Enterprise Mrg
9.8
CVE-2012-3460
cumin: At installation postgresql database user created without password
8.0
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
7.8
CVE-2020-27786
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…
7.8
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages
7.8
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field