CVE-2013-2113
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-2113
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Foreman 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Foreman是一套用于物理和虚拟服务器中的生命周期管理工具。该工具提供服务开通、配置管理以及报告状态等功能。 Foreman 1.2.0-rc1及之前版本存在权限许可和访问控制问题漏洞。远程经过授权的攻击者可通过改变管理的标志，或分配任意角色，利用该漏洞以特权创建或编辑其他用户获得特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-2113
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-2113
Please Login to view more intelligence information
- https://bugzilla.redhat.com/show_bug.cgi?id=968166x_refsource_CONFIRM
- 🔗 https://groups.google.com/forum/#%21topic/foreman-users/6WpO_3ugiXUx_refsource_CONFIRM
- 🔗 http://projects.theforeman.org/issues/2630x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2013-2113
Same Patch Batch · n/a · 2013-07-31 · 43 CVEs total
| CVE-2013-4673 | Symantec Web Gateway 远程命令执行漏洞 | |
| CVE-2013-4156 | Apache OpenOffice 内存损坏漏洞 | |
| CVE-2013-4652 | Siemens Scalance W-700 Series 身份认证绕过漏洞 | |
| CVE-2013-4651 | Siemens Scalance W-700 系列设备SSL证书欺骗漏洞 | |
| CVE-2013-4911 | Siemens SIMATIC WinCC TIA Portal 跨站请求伪造漏洞 | |
| CVE-2013-3443 | Cisco Wide Area Application Services 远程代码执行漏洞 | |
| CVE-2013-3444 | 多款思科产品Web框架操作系统命令注入漏洞 | |
| CVE-2012-5460 | Juniper Junos Pulse Secure Access Service 跨站脚本漏洞 | |
| CVE-2013-3724 | Monkey ‘mk_request_header_process’函数输入验证错误漏洞 | |
| CVE-2012-3913 | Cisco VC220和VC240网络摄像机拒绝服务漏洞 | |
| CVE-2013-2994 | IBM WebSphere Commerce Enterprise 身份认证绕过漏洞 | |
| CVE-2013-4672 | Symantec Web Gateway 远程命令执行漏洞 | |
| CVE-2013-4671 | Symantec Web Gateway 跨站请求伪造漏洞 | |
| CVE-2013-4670 | Symantec Web Gateway 多个跨站脚本漏洞 | |
| CVE-2013-1617 | Symantec Web Gateway SQL注入漏洞 | |
| CVE-2013-1616 | Symantec Web Gateway 远程命令注入漏洞 | |
| CVE-2013-2993 | IBM WebSphere Commerce Enterprise 身份认证绕过漏洞 | |
| CVE-2013-5020 | miniBB 多个跨站脚本漏洞 | |
| CVE-2013-5019 | Ultra Mini HTTPD ‘GET’ 请求基于栈的缓冲区溢出漏洞 | |
| CVE-2013-4674 | Symantec Encryption Management Server Web Email Protection 跨站脚本漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2013-2113
No comments yet