Test ID:	1.3.6.1.4.1.25623.1.0.803180
Category:	Web application abuses
Title:	Apache Rave User Information Disclosure Vulnerability
Summary:	Apache Rave is prone to an information disclosure vulnerability.
Description:	Summary: Apache Rave is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to error in handling of User RPC API, returns the full user object, including the salted and hashed password. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information about all user accounts via the offset parameter. Affected Software/OS: Apache Rave versions 0.11 to 0.20 Solution: Upgrade to Apache Rave 0.20.1 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1814 Bugtraq: 20130312 [CVE-2013-1814] Apache Rave exposes User over API (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html http://www.exploit-db.com/exploits/24744/
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.