// For flags

CVE-2013-4226

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

El módulo Authenticated User Page Caching (Authcache) versiones 7.x-1.x anteriores a 7.x-1.5 para Drupal, no restringe apropiadamente el acceso a las páginas almacenadas en caché, lo que permite a atacantes remotos con la misma combinación de roles que el superusuario, obtener información confidencial por medio de las páginas almacenadas en caché del superusuario.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2013-06-12 CVE Reserved
  • 2020-02-18 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-862: Missing Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.0
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.0"
drupal
Affected
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.1
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.1"
drupal
Affected
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.2
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.2"
drupal
Affected
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.3
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.3"
drupal
Affected
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.4
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.4"
drupal
Affected
Drupal
Search vendor "Drupal"
Authenticated User Page Caching
Search vendor "Drupal" for product "Authenticated User Page Caching"
7.x-1.5
Search vendor "Drupal" for product "Authenticated User Page Caching" and version "7.x-1.5"
drupal
Affected