Vulnerability Details : CVE-2013-5995
data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses.
Vulnerability category: Information leak
Exploit prediction scoring system (EPSS) score for CVE-2013-5995
Probability of exploitation activity in the next 30 days: 0.14%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 49 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-5995
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
8.0
|
4.9
|
NIST |
CWE ids for CVE-2013-5995
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-5995
-
http://www.ec-cube.net/info/weakness/weakness.php?id=51
脆弱性 | ECサイト構築・リニューアルは「ECオープンプラットフォームEC-CUBE」Exploit;Patch
-
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000106
JVNDB-2013-000106 - JVN iPedia - 脆弱性対策情報データベース
-
http://svn.ec-cube.net/open_trac/changeset/23274
Changeset 23274 – EC-CUBE TracExploit;Patch
-
http://jvn.jp/en/jp/JVN55630933/index.html
JVN#55630933: EC-CUBE information disclosure vulnerability
Products affected by CVE-2013-5995
- cpe:2.3:a:lockon:ec-cube:2.12.3:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.3en:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.3enp1:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.3enp2:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.5:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.5en:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.4en:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.6:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.12.6en:*:*:*:*:*:*:*
- cpe:2.3:a:lockon:ec-cube:2.13.0:*:*:*:*:*:*:*