CVEvulnerability
CVE-2013-6492
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
Affected configurations
• ryan ohara piranha 0.8.6
Related
Weakness · not in database (1)
References
- http://bugs.centos.org/view.php?id=6825 bugs.centos.org
- http://rhn.redhat.com/errata/RHSA-2014-0174.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0175.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1043040 bugzilla.redhat.com
- http://bugs.centos.org/view.php?id=6825 bugs.centos.org
- http://rhn.redhat.com/errata/RHSA-2014-0174.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0175.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1043040 bugzilla.redhat.com