PT-2013-5001

CVE-2013-4404

·

Published

2013-12-23

·

Updated

2021-07-15

Description by

CVSS 2.0
6.5
Medium
MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG Grid version 2.4
Description The issue allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations.
Recommendations For Red Hat Enterprise MRG Grid version 2.4, consider restricting access to sensitive information and privileged operations until a fix is available. As a temporary workaround, review and enforce user roles manually to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
RHSA-2013:1851
RHSA-2013:1852
Found an issue in the description? Have something to add? Feel free to write us 👾