← Back

CVE-2013-5054

nvd nist
Published: Dec 11, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."

Affected (3)

Microsoft
2 products
Office
Office 2013 Rt
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Office
Version 2013
Office
Version 2013
Office 2013 Rt
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.