Lucene search

K
cve[email protected]CVE-2010-2113
HistoryMay 28, 2010 - 8:30 p.m.

CVE-2010-2113

2010-05-2820:30:01
CWE-352
web.nvd.nist.gov
19
cve-2010-2113
csrf
uniform server 5.6.5
cross-site request forgery
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.

Affected configurations

NVD
Node
uniformserveruniformserverMatch5.6.5

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.6%

Related for CVE-2010-2113