VULNERABILITY INTELLIGENCE
CVE-2013-7239
CVSS score4.8 MEDIUM
EPSS probability1.18%
CISA KEVNot currently listed
Published2014-01-13
Last modified2026-06-17
CVSS vectorAV:A/AC:L/Au:N/C:P/I:P/A:N
Description
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- security@debian.org
- security@debian.org — Vendor Advisory
- security@debian.org
- security@debian.org
- security@debian.org
- security@debian.org — Patch
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch