CVE-2013-4611

Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:project-redcap:redcap:4.13.18:::::::*
	cpe:2.3:a:project-redcap:redcap:4.14.5:::::::*
	cpe:2.3:a:project-redcap:redcap:4.14.6:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.0:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.1:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.2:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.3:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.4:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.0:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.1:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.2:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.3:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.4:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.5:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.6:::::::*
	cpe:2.3:a:vanderbilt:redcap::::::::
	cpe:2.3:a:vanderbilt:redcap:4.14.0:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.1:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.2:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.3:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.4:::::::*

History

21 Nov 2024, 01:55

Type	Values Removed	Values Added
References	~~() http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf -~~	() http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf -

Information

Published : 2013-06-17 11:38

Updated : 2024-11-21 01:55

NVD link : CVE-2013-4611

Mitre link : CVE-2013-4611

CVE.ORG link : CVE-2013-4611

JSON object : View

Products Affected

vanderbilt

redcap

project-redcap

redcap

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-4611", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-06-17T11:38:53.613", "references": [{"url": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "source": "cve@mitre.org"}, {"url": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en REDCap anterior a v5.1.1 permite a atacantes remotos tener un impacto no determinado a trav\u00e9s de vectores que implican (1) la pagina de Online Designer o (2) la pagina de Manage Survey Participants."}], "lastModified": "2024-11-21T01:55:55.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:project-redcap:redcap:4.13.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58C92B2E-A9AF-43B4-B1E4-7A873AF1DEAD"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.14.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA4E7E65-1147-4620-B31F-617D34822E9E"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.14.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00CED35E-7640-44D4-B5A4-EED2D0163C79"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61C3C73D-1818-4DB7-A806-FC999EADE7E6"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.15.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8347F389-9331-4689-B52A-87ABFFF02141"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.15.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B739D2A5-46DF-4CE8-9BAB-6BB94743D21D"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.15.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7969B764-47A6-4AC7-B18E-236FF25C6552"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:4.15.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26E48768-FDF1-4A54-8F0E-EC4732B55D66"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F62B324D-6F70-41B8-B3AC-CDA6D4C3AB25"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7712A887-BB81-4FAE-9B76-FB9886BE41D5"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "817D8D01-B8E1-4F86-9ACE-0CAF87DA13A2"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5241C18D-9714-4DEA-9552-55DD3FBE4613"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "220E8227-7D41-48A9-9D61-BEB47EB19FCA"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D82141E-A1F3-474C-86CE-C7409C4E445F"}, {"criteria": "cpe:2.3:a:project-redcap:redcap:5.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B2AB13A-9C46-4F92-B0D4-96358CF0FDC1"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C765A45C-FBBA-4AA0-97BB-9945A8456072", "versionEndIncluding": "5.1.0"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:4.14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D293B038-228E-42B6-BC99-9BDFCD8D562C"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:4.14.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "789C86D0-A11F-4C40-950A-5A617AD7C23A"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:4.14.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C366E672-CD77-4932-80D2-09A61B3B1A8E"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:4.14.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7055FD2-C107-4D23-8B8C-28607C0C0ADA"}, {"criteria": "cpe:2.3:a:vanderbilt:redcap:4.14.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3242EC5F-0091-4097-9C6E-ADE5100017AF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}