CVE-2013-6288

Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/54978	Vendor Advisory
http://typo3.org/extensions/repository/view/solr	Patch
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/
http://www.securityfocus.com/bid/62674

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ingo_renner:apache_solr::::::::
	cpe:2.3:a:ingo_renner:apache_solr:1.0:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:1.3.0:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:1.3.1:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.1.0:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.2.0:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.2.1:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.2.2:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.8.0:::::::*
	cpe:2.3:a:ingo_renner:apache_solr:2.8.1:::::::*

cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-10-28 22:55

Updated : 2024-02-04 18:16

NVD link : CVE-2013-6288

Mitre link : CVE-2013-6288

CVE.ORG link : CVE-2013-6288

JSON object : View

Products Affected

ingo_renner

apache_solr

typo3

typo3

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-6288", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-28T22:55:04.163", "references": [{"url": "http://secunia.com/advisories/54978", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://typo3.org/extensions/repository/view/solr", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/62674", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to \"Insecure Unserialize.\""}, {"lang": "es", "value": "Vunerabilidad sin especificar en Apache Solr para la extensi\u00f3n TYPO3 anterior a 2.8.3 con impacto y vectores de ataque desconocidos relacionados con \"Deserializaci\u00f3in Insegura\""}], "lastModified": "2013-11-03T03:35:02.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ingo_renner:apache_solr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9314F3A-5E7D-4FBE-A46C-35A6F3F3A7BA", "versionEndIncluding": "2.8.2"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "211526D1-C48E-43C4-8E60-9A3DDABC53D1"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D844805F-73B6-461C-94DF-F2950AB4E270"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E2C38DE-FF31-4CAC-8AE2-A596BFBC0621"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83ECCAB7-3848-4289-8CC8-CCDCBAB47169"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE2B5498-4AA2-4B3B-A526-6732035B3053"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9529891-B227-4616-B528-668C69359C5E"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A2C074A-D514-422C-ACE5-465303A93080"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB6526EE-4256-48F8-BE6A-F34797BD0BD5"}, {"criteria": "cpe:2.3:a:ingo_renner:apache_solr:2.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06520820-6E50-46EC-880A-786E59F131FA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E66C5ABA-7727-4562-A792-5E450098D520"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}