CVE-2013-6766

Published: May 19, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

Affected (7)

Products: Openvas: Openvas Administrator

Openvas

1 product

Openvas Administrator

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Openvas Openvas Administrator	Version 1.2.0
Openvas Openvas Administrator	Version 1.2.1
Openvas Openvas Administrator	Version 1.2 rc1
Openvas Openvas Administrator	Version 1.3.0
Openvas Openvas Administrator	Version 1.3.1
Openvas Openvas Administrator	Version 1.3 beta1
Openvas Openvas Administrator	Version 1.3 rc1