5
CVSSv2

CVE-2013-6246

Published: 24/10/2013 Updated: 24/10/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Dell Quest One Password Manager, possibly 5.0, allows remote malicious users to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

dell quest one password manager 5.0

Exploits

source: wwwsecurityfocuscom/bid/63259/info DELL Quest One Password Manager is prone to a security bypass vulnerability An attacker can exploit this issue to bypass certain security restrictions and gain access to sensitive areas of the application to perform unauthorized actions; this may aid in launching further attacks ScenarioActi ...