CVE-2013-6492
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages,...
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
Exploit likelihood
What each source reports
NVD Score used
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
- Record
CVE-2013-6492- CVSS 2.0
- 5.8 Medium
AV:A/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
- Record
CVE-2013-6492- Updated
- 2026-11-02
EUVDEUVD-2013-6295 No score
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
- Record
EUVD-2013-6295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4hq3-p5rp-7qxv No score
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages,...
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
- Record
GHSA-4hq3-p5rp-7qxv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
piranhaRed Hat:rhel_cluster:5 |
before 0:0.8.4-26.el5_10.1 | 0:0.8.4-26.el5_10.1 |
piranha-debuginfoRed Hat:rhel_cluster:5 |
before 0:0.8.4-26.el5_10.1 | 0:0.8.4-26.el5_10.1 |
piranhaRed Hat:enterprise_linux:6::server |
before 0:0.8.6-4.el6_5.2 | 0:0.8.6-4.el6_5.2 |
piranha-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.8.6-4.el6_5.2 | 0:0.8.6-4.el6_5.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | RedHat Piranha - Remote Security Bypass | 2013-12-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6492 is a medium vulnerability (CVSS 5.8) in Ryan Ohara Piranha, published February 14, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.00%, the 90th percentile. Fixed in piranha 0:0.8.4-26.el5_10.1.
References
rhn.redhat.com/errata/RHSA-2014-0175.html
bugs.centos.org/view.php?id=6825
bugzilla.redhat.com/show_bug.cgi?id=1043040
nvd.nist.gov/vuln/detail/CVE-2013-6492
github.com/advisories/GHSA-4hq3-p5rp-7qxv
Show 8 moreShow less
access.redhat.com/errata/RHSA-2014:0174
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0174.json
cve.org/CVERecord?id=CVE-2013-6492