Lucene search

K
cve[email protected]CVE-2010-2114
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2114

2022-10-0316:21:09
CWE-352
web.nvd.nist.gov
19
cve-2010-2114
csrf
brekeke pbx
vulnerability
nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.0%

Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean.

Affected configurations

NVD
Node
brekekepbxMatch2.4.4.8
CPENameOperatorVersion
brekeke:pbxbrekeke pbxeq2.4.4.8

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.0%

Related for CVE-2010-2114