CVE-2014-8246

Опубликовано: 16 дек. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Ссылки

http://seclists.org/fulldisclosure/2014/Dec/55
http://securitytracker.com/id?1031375
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
Vendor Advisory
http://www.kb.cert.org/vuls/id/343060
Third Party Advisory
US Government Resource
http://www.securityfocus.com/archive/1/534246/100/0/threaded
http://seclists.org/fulldisclosure/2014/Dec/55
http://securitytracker.com/id?1031375
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
Vendor Advisory
http://www.kb.cert.org/vuls/id/343060
Third Party Advisory
US Government Resource
http://www.securityfocus.com/archive/1/534246/100/0/threaded

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:broadcom:release_automation:*:*:*:*:*:*:*:*

Версия до 4.7.1 (включая)

EPSS

Процентиль: 59%

0.00389

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-383p-xxqc-c9c5

github

больше 3 лет назад