Lucene search

[email protected]CVE-2009-1802

HistoryMay 28, 2009 - 2:30 p.m.

CVE-2009-1802

2009-05-2814:30:00

CWE-352

[email protected]

web.nvd.nist.gov

csrf

vulnerabilities

freepbx

authentication

admin accounts

8.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.3%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.

CPENameOperatorVersion
freepbx:freepbxfreepbxeq2.5.0rc2
freepbx:freepbxfreepbxeq2.4.0_beta1
freepbx:freepbxfreepbxeq2.5.2
freepbx:freepbxfreepbxeq2.5.0_beta1
freepbx:freepbxfreepbxeq2.4.1
freepbx:freepbxfreepbxeq2.4.0_beta2
freepbx:freepbxfreepbxeq2.5.0rc3
freepbx:freepbxfreepbxeq2.5
freepbx:freepbxfreepbxeq2.5.1
freepbx:freepbxfreepbxeq2.4

CPE	Name	Operator	Version
freepbx:freepbx	freepbx	eq	2.5.0rc2
freepbx:freepbx	freepbx	eq	2.4.0_beta1
freepbx:freepbx	freepbx	eq	2.5.2
freepbx:freepbx	freepbx	eq	2.5.0_beta1
freepbx:freepbx	freepbx	eq	2.4.1
freepbx:freepbx	freepbx	eq	2.4.0_beta2
freepbx:freepbx	freepbx	eq	2.5.0rc3
freepbx:freepbx	freepbx	eq	2.5
freepbx:freepbx	freepbx	eq	2.5.1
freepbx:freepbx	freepbx	eq	2.4

Rows per page:

1-10 of 121

References

freepbx.org/trac/ticket/3660

osvdb.org/54262

secunia.com/advisories/34772

www.securityfocus.com/bid/34857

8.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.3%

JSON

Related for CVE-2009-1802

cvelist1 prion1