What is CVE-2013-3564?

CVE-2013-3564 is a medium-severity vulnerability in Videolan Vlc Media Player, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-06.

How severe is CVE-2013-3564?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Videolan Vlc Media Player

CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating.

Vulnerability class: Information Disclosure

EPSS: 0.011 (62.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Videolan Vlc_media_player
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2013-3564?: CVE-2013-3564 is a medium-severity vulnerability in Videolan Vlc Media Player, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-06.
How severe is CVE-2013-3564?: Medium severity. CVSS v3 base score is 5.3 out of 10.