Review Board CVE-2013-4410 Access Bypass Vulnerability

Bugtraq ID:	63022
Class:	Access Validation Error
CVE:	CVE-2013-4410
Remote:	Yes
Local:	No
Published:	Oct 10 2013 12:00AM
Updated:	Apr 13 2015 09:57PM
Credit:	Reported by the vendor.
Vulnerable:	Beanbag Review Board 1.7.14 Beanbag Review Board 1.7.12 Beanbag Review Board 1.7.11 Beanbag Review Board 1.7.10 Beanbag Review Board 1.7.9 Beanbag Review Board 1.6.18 Beanbag Review Board 1.6.17 Beanbag Review Board 1.6.16
Not Vulnerable:	Beanbag Review Board 1.7.15 Beanbag Review Board 1.6.19

Review Board CVE-2013-4410 Access Bypass Vulnerability

Review Board is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and gain unauthorized access to certain resources.

Versions prior to Review Board 1.6.19 and 1.7.15 are vulnerable.

Review Board CVE-2013-4410 Access Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Review Board CVE-2013-4410 Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Review Board CVE-2013-4410 Access Bypass Vulnerability

References:

• New security releases: Review Board 1.6.19 and 1.7.15 (Beanbag)
  
• Review Board 1.6.19 Release Notes (Beanbag)
  
• Review Board 1.7.15 Release Notes (Beanbag)
  
• Review Board Homepage (Beanbag)