exploitDog

CVE-2011-3636

Опубликовано: 06 дек. 2011

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-352

https://bugzilla.redhat.com/show_bug.cgi?id=747710FreeIPA: CSRF vulnerability

EPSS

Процентиль: 37%

0.00157

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2011-3636

nvd

почти 14 лет назад

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.

GHSA-62x7-6pjw-j8fh

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.

ELSA-2011-1533

oracle-oval

почти 14 лет назад

ELSA-2011-1533: ipa security and bug fix update (MODERATE)

EPSS

Процентиль: 37%

0.00157

Низкий

4.3 Medium

CVSS2