exploitDog

CVE-2012-3309

Опубликовано: 29 авг. 2012

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_guardium:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

cpe:2.3:a:ibm:infosphere_guardium:8.00:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_guardium:8.01:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00146

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-4cfx-p6p6-jpvw

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

EPSS

Процентиль: 35%

0.00146

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352