Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-2738
cve-2009-2738
cross-site request forgery
csrf
freenas
webgui
authentication hijacking
security vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.6%
Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
Affected configurations
Node
freenasfreenasRange≤0.69.2
ORfreenasfreenasMatch0.69.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| freenas:freenas | freenas | le | 0.69.2 |
| freenas:freenas | freenas | eq | 0.69.1 |
Related
cvelist
cvelist
CVE-2009-2738
2022-10-03 16:24:07
nvd
nvd
CVE-2009-2738
2009-08-11 18:30:01
jvn
jvn
JVN#15267895 Cross-site request forgery vulnerability in FreeNAS
2009-08-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-08-11 18:30:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.3 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.6%
Related for CVE-2009-2738