CVE-2013-4598 - Vulnerability Details - OpenCVE

The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.0066.

Key SSVC decision points have not yet been added.

Vendors	Products
Groups Communities And Co Project Subscribe	Gcc Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:-::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha1::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha2::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha3::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha4::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:beta2::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.1:beta1::::drupal::*
	cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.x:dev::::drupal::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2013-4454	The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/55651
http://www.securityfocus.com/bid/63703
https://drupal.org/node/2132747
https://drupal.org/node/2135267

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2014-05-27T15:00:00

Updated: 2024-08-06T16:52:26.603Z

Reserved: 2013-06-12T00:00:00

Link: CVE-2013-4598

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2014-05-27T14:55:10.227

Modified: 2025-04-12T10:46:40.837

Link: CVE-2013-4598

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-264

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-11-13T00:00:00", "descriptions": [{"lang": "en", "value": "The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-05-27T14:57:00", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://drupal.org/node/2132747"}, {"name": "55651", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/55651"}, {"tags": ["x_refsource_MISC"], "url": "https://drupal.org/node/2135267"}, {"name": "63703", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/63703"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2013-4598", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://drupal.org/node/2132747", "refsource": "CONFIRM", "url": "https://drupal.org/node/2132747"}, {"name": "55651", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55651"}, {"name": "https://drupal.org/node/2135267", "refsource": "MISC", "url": "https://drupal.org/node/2135267"}, {"name": "63703", "refsource": "BID", "url": "http://www.securityfocus.com/bid/63703"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T16:52:26.603Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://drupal.org/node/2132747"}, {"name": "55651", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/55651"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://drupal.org/node/2135267"}, {"name": "63703", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/63703"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-4598", "datePublished": "2014-05-27T15:00:00", "dateReserved": "2013-06-12T00:00:00", "dateUpdated": "2024-08-06T16:52:26.603Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:-:*:*:*:drupal:*:*", "matchCriteriaId": "1EC4BC99-379D-482E-B274-162ED1C5996B", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha1:*:*:*:drupal:*:*", "matchCriteriaId": "0AB4B11A-7CCA-4D42-A9F6-5F73EF9A4F20", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha2:*:*:*:drupal:*:*", "matchCriteriaId": "E5EC6F3B-5ACD-44CB-9079-5C2D1CB46D8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha3:*:*:*:drupal:*:*", "matchCriteriaId": "F9B99C4F-69F5-4A9C-9331-B42A581EF3D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:alpha4:*:*:*:drupal:*:*", "matchCriteriaId": "72FD7362-EBB8-4E89-A00B-0C092038C9C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.0:beta2:*:*:*:drupal:*:*", "matchCriteriaId": "3AD23F52-9C05-40B2-A969-597B2CFC1997", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.1:beta1:*:*:*:drupal:*:*", "matchCriteriaId": "151D7065-19B3-4D1E-A3DD-1FCCB1926139", "vulnerable": true}, {"criteria": "cpe:2.3:a:groups_communities_and_co_project:gcc:7.x-1.x:dev:*:*:*:drupal:*:*", "matchCriteriaId": "84DA754F-C336-4A98-9ADE-BFB7D12EA27D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors."}, {"lang": "es", "value": "El m\u00f3dulo Groups, Communities And Co (GCC) 7.x-1.x anterior a 7.x-1.1 para Drupal no comprueba debidamente permiso, lo que permite a atacantes remotos acceder a las p\u00e1ginas de configuraci\u00f3n a trav\u00e9s de vectores no especificados."}], "id": "CVE-2013-4598", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-05-27T14:55:10.227", "references": [{"source": "secalert@redhat.com", "tags": ["Permissions Required"], "url": "http://secunia.com/advisories/55651"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/63703"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://drupal.org/node/2132747"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://drupal.org/node/2135267"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://secunia.com/advisories/55651"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/63703"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://drupal.org/node/2132747"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://drupal.org/node/2135267"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}