CVE-2013-6492

Published: Feb 14, 2014Modified: Apr 29, 2026

5.8

Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 6.5 / Impact: 6.4

Source: NVD

Description

The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.

Affected (1)

Products: Ryan Ohara: Piranha

Ryan Ohara

1 product

Piranha

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ryan Ohara Piranha	Version 0.8.6

Related CWEs

CWE-264

References (8)

http://bugs.centos.org/view.php?id=6825

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0174.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0175.html

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1043040

Source: secalert@redhat.com

http://bugs.centos.org/view.php?id=6825

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0174.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0175.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1043040

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.