Mambo CMS CVE-2013-2563 Password Hash Information Disclosure Vulnerability

Bugtraq ID:	58573
Class:	Design Error
CVE:	CVE-2013-2563
Remote:	No
Local:	Yes
Published:	Jan 08 2012 12:00AM
Updated:	Mar 19 2015 08:36AM
Credit:	Larry W. Cashdollar
Vulnerable:	Mambo Mambo Open Source 4.6.5
Not Vulnerable:

Mambo CMS CVE-2013-2563 Password Hash Information Disclosure Vulnerability

Mambo CMS is prone to an information-disclosure vulnerability.

An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks.

Mambo CMS 4.6.5 is vulnerable; other versions may also be affected.

Mambo CMS CVE-2013-2563 Password Hash Information Disclosure Vulnerability

An attacker requires local interactive access to the affected application to exploit this issue.

Mambo CMS CVE-2013-2563 Password Hash Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mambo CMS CVE-2013-2563 Password Hash Information Disclosure Vulnerability

References:

• Mambo CMS 4.6.5 Denial Of Service / Disclosure - CVE requests (oss-sec)
  
• Mambo Home Page (Mambo )