VULNERABILITY INTELLIGENCE

CVE-2013-3502

CVSS score6.5 MEDIUM
EPSS probability53.71%
CISA KEVNot currently listed
Published2013-05-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.

Primary references