CVE-2013-6806: Medium severity OpenText Exceed OnDemand vulnerability
OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6806?
CVE-2013-6806 is classified as a moderate severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2013-6806?
To mitigate CVE-2013-6806, update OpenText Exceed OnDemand to the latest version that includes patches addressing this issue.
What type of attack is CVE-2013-6806 vulnerable to?
CVE-2013-6806 is vulnerable to man-in-the-middle attacks which can compromise bidirectional authentication.
What impact does CVE-2013-6806 have on data security?
The vulnerability can lead to sensitive information being transmitted in plaintext, making it accessible to attackers.
Which versions of OpenText Exceed OnDemand are affected by CVE-2013-6806?
CVE-2013-6806 specifically affects OpenText Exceed OnDemand version 8.0.