CVE-2013-4611

Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:project-redcap:redcap:5.0.1:::::::*
	cpe:2.3:a:project-redcap:redcap:4.14.6:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.1:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.0:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.2:::::::*
	cpe:2.3:a:vanderbilt:redcap::::::::
	cpe:2.3:a:project-redcap:redcap:4.14.5:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.4:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.3:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.2:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.5:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.4:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.3:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.6:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.4:::::::*
	cpe:2.3:a:project-redcap:redcap:4.13.18:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.3:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.1:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.0:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.2:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.0:::::::*

Information

Published : 2013-06-17 04:38

Updated : 2021-07-01 09:58

NVD link : CVE-2013-4611

Mitre link : CVE-2013-4611

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

project-redcap

redcap

vanderbilt

redcap

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "name": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-4611", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-06-17T11:38Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.14.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.1.0"}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.14.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.13.18:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-01T16:58Z"}