« Volver al listado

CVE-2013-4598

Estado: ModificadaMedia (5)—

The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Groups Communities AND CO Project — GCC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4598",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-27T14:55:10.227",
  "references": [
    {
      "url": "http://secunia.com/advisories/55651",
      "tags": [
        "Permissions Required"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/63703",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2132747",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2135267",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/55651",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/63703",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2132747",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2135267",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El módulo Groups, Communities And Co (GCC) 7.x-1.x anterior a 7.x-1.1 para Drupal no comprueba debidamente permiso, lo que permite a atacantes remotos acceder a las páginas de configuración a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:57:33.497",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:-:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EC4BC99-379D-482E-B274-162ED1C5996B"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AB4B11A-7CCA-4D42-A9F6-5F73EF9A4F20"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5EC6F3B-5ACD-44CB-9079-5C2D1CB46D8A"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha3:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9B99C4F-69F5-4A9C-9331-B42A581EF3D9"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha4:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72FD7362-EBB8-4E89-A00B-0C092038C9C8"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:beta2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AD23F52-9C05-40B2-A969-597B2CFC1997"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.1:beta1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "151D7065-19B3-4D1E-A3DD-1FCCB1926139"
            },
            {
              "criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84DA754F-C336-4A98-9ADE-BFB7D12EA27D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}