CVE-2013-4611

Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:project-redcap:redcap:5.0.1:::::::*
	cpe:2.3:a:project-redcap:redcap:4.14.6:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.1:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.0:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.2:::::::*
	cpe:2.3:a:vanderbilt:redcap::::::::
	cpe:2.3:a:project-redcap:redcap:4.14.5:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.4:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.3:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.2:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.5:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.4:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.4:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.3:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.6:::::::*
	cpe:2.3:a:project-redcap:redcap:4.13.18:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.3:::::::*
	cpe:2.3:a:project-redcap:redcap:4.15.1:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.0:::::::*
	cpe:2.3:a:project-redcap:redcap:5.0.2:::::::*
	cpe:2.3:a:vanderbilt:redcap:4.14.0:::::::*

Information

Published : 2013-06-17 11:38

Updated : 2021-07-01 16:58

NVD link : CVE-2013-4611

Mitre link : CVE-2013-4611

JSON object : View

Products Affected

vanderbilt

redcap

project-redcap

redcap

CWE

NVD-CWE-noinfo

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "name": "http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2013-4611", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2013-06-17T11:38Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.14.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.1.0"}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.14.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.13.18:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:4.15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:project-redcap:redcap:5.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:vanderbilt:redcap:4.14.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-01T16:58Z"}