Red Hat Piranha Remote Security Bypass Vulnerability

Bugtraq ID:	65587
Class:	Design Error
CVE:	CVE-2013-6492
Remote:	Yes
Local:	No
Published:	Dec 11 2013 12:00AM
Updated:	Dec 11 2013 12:00AM
Credit:	Andreas Schiermeier
Vulnerable:	Redhat Piranha 0.8.6 Redhat Enterprise Linux Load Balancer EUS 6.5.z Redhat Enterprise Linux Load Balancer 6 Redhat Enterprise Linux Clustering 5 server Oracle Enterprise Linux 5 CentOS CentOS 6 CentOS CentOS 5
Not Vulnerable:

Red Hat Piranha Remote Security Bypass Vulnerability

Red Hat Piranha is prone to a remote security bypass vulnerability.

An attacker can exploit this issue to gain unauthorized access to the restricted pages of the application, this may lead to further attacks.

Red Hat Piranha 0.8.6 is vulnerable; other versions may also be affected.

Red Hat Piranha Remote Security Bypass Vulnerability

An attacker can exploit this issue using readily avaialble tools.

Following exploits are available.

• /data/vulnerabilities/exploits/65587.txt

Red Hat Piranha Remote Security Bypass Vulnerability

References:

• Piranha Homepage (Red Hat)
  
• Bug 1043040 - (CVE-2013-6492) CVE-2013-6492 piranha: web UI authentication bypa (Red Hat)
  
• 0006825: Authentication bypass in Webinterface - CentOS Bug Tracker (Cent OS)
  
• Security Advisory Important: piranha security update (Red Hat)