CVE-2013-6806

Published: May 19, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.

Affected (1)

Products: Opentext: Exceed Ondemand

1 product

Exceed Ondemand

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opentext Exceed Ondemand	Version 8.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://github.com/koto/exceed-mitm

Source: cve@mitre.org

https://github.com/koto/exceed-mitm

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.