| |
Vulnerability CVE-2013-3564
Published: 2020-02-06 Modified: 2020-02-07
| Description: |
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating. |
Type:
CWE-200 (Information Exposure)
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-007.txt
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
