CVE-2012-3532

Опубликовано: 12 апр. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Ссылки

http://rhn.redhat.com/errata/RHSA-2013-0733.html
Vendor Advisory
http://secunia.com/advisories/53005
Vendor Advisory
http://www.securityfocus.com/bid/59015
https://bugzilla.redhat.com/show_bug.cgi?id=851046
http://rhn.redhat.com/errata/RHSA-2013-0733.html
Vendor Advisory
http://secunia.com/advisories/53005
Vendor Advisory
http://www.securityfocus.com/bid/59015
https://bugzilla.redhat.com/show_bug.cgi?id=851046

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*

Версия до 5.2.2 (включая)

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00657

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2012-3532

redhat

больше 13 лет назад

CVE-2012-3532

debian

больше 13 лет назад

Cross-site request forgery (CSRF) vulnerability in the GateIn Portal c ...

GHSA-fpcp-pjgq-5rf9

github

около 4 лет назад

EPSS

Процентиль: 48%

0.00657

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352