What is CVE-2013-0185?

CVE-2013-0185 is a high-severity vulnerability in Redhat Manageiq Enterprise Virtualization Manager, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-05-01.

How severe is CVE-2013-0185?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Redhat Manageiq Enterprise Virtualization Manager

CVE-2013-0185

Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.007 (51.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Redhat Manageiq_enterprise_virtualization_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2013-0185?: CVE-2013-0185 is a high-severity vulnerability in Redhat Manageiq Enterprise Virtualization Manager, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-05-01.
How severe is CVE-2013-0185?: High severity. CVSS v3 base score is 8.8 out of 10.