CVE-2013-5995: Infoleak
Published Nov 21, 2013
·Updated
data/class/helper/SCHelperAddress.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses.
Affected Software
10 affected components
LOCKON EC-CUBE=2.12.3
LOCKON EC-CUBE=2.12.3en
LOCKON EC-CUBE=2.12.3enp1
LOCKON EC-CUBE=2.12.3enp2
LOCKON EC-CUBE=2.12.4en
LOCKON EC-CUBE=2.12.5
LOCKON EC-CUBE=2.12.5en
LOCKON EC-CUBE=2.12.6
LOCKON EC-CUBE=2.12.6en
LOCKON EC-CUBE=2.13.0
Remediation
Patch Available
Patch Available
Event History
Nov 21, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5995?
CVE-2013-5995 has been rated as a medium severity vulnerability due to its impact on sensitive information exposure.
2
How do I fix CVE-2013-5995?
To fix CVE-2013-5995, upgrade to LOCKON EC-CUBE version 2.13.1 or later.
3
What software is affected by CVE-2013-5995?
CVE-2013-5995 affects LOCKON EC-CUBE versions 2.12.3 through 2.13.0.
4
What kind of information can be accessed due to CVE-2013-5995?
CVE-2013-5995 allows remote authenticated users to access sensitive address information.
5
Is CVE-2013-5995 a remote vulnerability?
Yes, CVE-2013-5995 enables remote authenticated users to exploit the vulnerability.