CVE-2010-3449

Опубликовано: 06 дек. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:jesse_mcconnell:redback:*:*:*:*:*:*:*:*

Версия до 1.2.3 (включая)

cpe:2.3:a:jesse_mcconnell:redback:1.0:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.0:alpha4:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.1:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.2:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.2:beta1:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.2:beta2:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:jesse_mcconnell:redback:1.2.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:apache:archiva:1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02413

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-c9q3-7wj8-34wx

github

больше 3 лет назад