« Back to list

CVE-2013-1814

Status: ModifiedMedium (4)—💥 Exploit

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

💥 Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

⚠️ GitHub proofs of concept are not verified: some are fake or contain malware. Never run them outside an isolated lab.

Affected technologies (1)

Apache — Rave

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2013-1814",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-03-14T00:55:01.090",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html",
      "tags": [
        "Exploit"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.exploit-db.com/exploits/24744/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/24744/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response."
    },
    {
      "lang": "es",
      "value": "El programa users/get en el User RPC API en Apache Rave v0.11 hasta v0.20 permite a atacantes remotos obtener información acerca de todos los usuarios a través del parámetro oofset, cono se demostró descubriendo los hashes de contraseñas en el campo contraseña de respuesta."
    }
  ],
  "lastModified": "2026-06-16T23:52:10.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:rave:0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD7D2E72-60D2-49C2-9376-15BA73183EDF"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4965E549-FC77-4E03-BE92-44E16BC250E8"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F2526D3-9DBE-4E3A-A1BC-E1F2EBFF3ECD"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "604DC46F-1A27-414E-B0D2-5C601D0E9FAF"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6601CC36-3EA0-43E9-A543-AA537D2A99EA"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B7C0F48-1167-48C8-8ABE-AAB5E8F0BE7D"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D11F012-652C-471E-BCBE-84EB9EFE83B7"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F7AE3A6-390E-45EA-9C54-484FC347FDAB"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25060BE5-EB03-4CE1-A369-1137BCBCC477"
            },
            {
              "criteria": "cpe:2.3:a:apache:rave:0.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68C5C17D-C9AA-4ABA-80EF-B40619BC6FD0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}