Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2013-6408 | First vendor Publication | 2013-12-07 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.4 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6408 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:25051 | |||
| Oval ID: | oval:org.mitre.oval:def:25051 | ||
| Title: | DSA-2963-1 lucene-solr - security update | ||
| Description: | Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2963-1 CVE-2013-6397 CVE-2013-6407 CVE-2013-6408 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0 | Product(s): | lucene-solr |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-06-18 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2963.nasl - Type : ACT_GATHER_INFO |
| 2014-01-07 | Name : The remote web server contains a Java application that is affected by an XML ... File : solr_4_3_1.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 12:37:34 |
|
| 2023-11-07 21:45:48 |
|
| 2023-02-13 09:28:17 |
|
| 2021-05-05 01:13:47 |
|
| 2021-05-04 12:28:08 |
|
| 2021-04-22 01:33:56 |
|
| 2020-05-24 01:12:38 |
|
| 2020-05-23 00:38:40 |
|
| 2019-09-12 12:05:37 |
|
| 2019-08-09 12:05:51 |
|
| 2019-02-11 12:01:13 |
|
| 2016-04-26 23:46:20 |
|
| 2014-07-17 09:21:50 |
|
| 2014-06-19 13:22:56 |
|
| 2014-03-08 13:22:54 |
|
| 2014-02-17 11:24:09 |
|
| 2014-01-04 13:19:47 |
|
| 2013-12-10 00:20:11 |
|
| 2013-12-08 00:19:24 |
|
