CVEvulnerability

CVE-2013-2747

6.5 MEDIUM Published 2014-01-29 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2014-01-29
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses: CWE-264

Description

The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a command prompt.

Affected configurations

• courion access risk management suite 8.0

Weakness · not in database (1)

CWE-264

References

http://blog.securestate.com/courion-authentication-bypass-vulnerability-disclosure-cve-2013-2747/ blog.securestate.com
http://blog.securestate.com/courion-authentication-bypass-vulnerability-disclosure-cve-2013-2747/ blog.securestate.com

CVE-2013-2747

Description

Affected configurations

Related

Weakness · not in database (1)

References