« Volver al listado

CVE-2013-4406

Estado: ModificadaMedia (5)—

The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Quick Tabs Module Project — Quicktabs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4406",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-19T14:55:07.203",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/04/14",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/05/1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2103113",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2103121",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2103127",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://drupal.org/node/2103187",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/04/14",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/10/05/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2103113",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2103121",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2103127",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://drupal.org/node/2103187",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab."
    },
    {
      "lang": "es",
      "value": "El módulo Quick Tabs 6.x-2.x anterior a 6.x-2.2, 6.x-3.x anterior a 6.x-3.2 y 7.x-3.x anterior a 7.x-3.6 para Drupal no comprueba debidamente permisos de bloque, lo que permite a atacantes remotos obtener información sensible mediante la lectura de una Quick Tab."
    }
  ],
  "lastModified": "2026-06-16T23:57:10.410",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:-:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F3FD9DE-0444-4C9E-BEA0-31E41DB8881E"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:beta1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94C2761B-F52B-4999-9799-149F56F8C88D"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:beta2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08404B6A-0204-4314-87C3-9D47EA9FF400"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.1:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA51F07F-C7FB-4B50-A06B-1CC3DFBCFC0B"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "609A173C-D64D-4F6C-9B2B-24CAD1333C2E"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:-:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D26F7835-1887-427E-84A0-C6C3290E995F"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:alpha1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4748AA82-DD22-4B9C-A96C-13E22879377B"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:alpha2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B96E18CB-A1BF-4200-8AEC-A303D7FAF908"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F12780AA-E292-44CD-8195-3BB65BF0301E"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "104E7892-E23C-4616-834B-ADBB8202B7A0"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta3:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EFA2661-4DB1-4510-8637-37CF9DFB01F4"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.1:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "246E4999-229D-4126-844F-0C1FCFE01BE9"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.2:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91E617D7-514D-4AE6-853B-FF0F77C335D8"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.3:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75510F0B-F988-4E27-A2B7-3254D7B2DFAE"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.4:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F6F1703-E97B-4B33-807F-064A75576326"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.5:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99BB7E0F-B5E9-43DF-8B47-F1AF896D810A"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C476D60A-E4C3-4D4D-9155-C18C97660D55"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:-:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2B9B66A-414F-429E-94AC-67B28B156AE5"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc1:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B03518D-24F8-4D25-A9E8-B3F669284BB7"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3E91FB3-14A0-4586-9723-F5493D471508"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc3:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E7228AD-F442-4183-B376-CAD6DE70E5B2"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc4:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65BDC620-39F7-4788-BAE7-6C8C6274CDFB"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc5:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2D5CEC5-09DD-4A9A-AE35-7DE57793CF22"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.1:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02B64BCD-770D-4005-8E6B-E21A3431A67A"
            },
            {
              "criteria": "cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6F8B0D9-D17A-45F7-B1E1-F93BB2C73932"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}