Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-2594
HistoryJul 02, 2010 - 12:43 p.m.

CVE-2010-2594

2010-07-0212:43:52
CWE-352
mitre
web.nvd.nist.gov
32
cve-2010-2594
csrf vulnerabilities
intersect alliance snare agent
authentication hijacking
security vulnerabilities
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.

Affected configurations

Nvd
Node
intersect_alliancesnare_agentRange≤3.2.3
OR
intersect_alliancesnare_agentMatch2.0
OR
intersect_alliancesnare_agentMatch2.1
OR
intersect_alliancesnare_agentMatch2.3
OR
intersect_alliancesnare_agentMatch2.4
OR
intersect_alliancesnare_agentMatch2.5
OR
intersect_alliancesnare_agentMatch2.5.2
OR
intersect_alliancesnare_agentMatch2.5.3
OR
intersect_alliancesnare_agentMatch2.5.4
OR
intersect_alliancesnare_agentMatch2.5.6
OR
intersect_alliancesnare_agentMatch2.5.7
OR
intersect_alliancesnare_agentMatch3.0.0
OR
intersect_alliancesnare_agentMatch3.1.0
OR
intersect_alliancesnare_agentMatch3.2.0
OR
intersect_alliancesnare_agentMatch3.2.1
OR
intersect_alliancesnare_agentMatch3.2.2
AND
sunsolaris
Node
intersect_alliancesnare_agentRange≤3.1.7
OR
intersect_alliancesnare_agentMatch3.0.0
OR
intersect_alliancesnare_agentMatch3.1.0
OR
intersect_alliancesnare_agentMatch3.1.2
OR
intersect_alliancesnare_agentMatch3.1.3
OR
intersect_alliancesnare_agentMatch3.1.4
OR
intersect_alliancesnare_agentMatch3.1.5
OR
intersect_alliancesnare_agentMatch3.1.6
AND
microsoftwindows_2000
OR
microsoftwindows_2003_server
OR
microsoftwindows_xp
Node
intersect_alliancesnare_agentRange≤1.5.0
OR
intersect_alliancesnare_agentMatch0.9.2
OR
intersect_alliancesnare_agentMatch0.9.6
OR
intersect_alliancesnare_agentMatch0.9.7
OR
intersect_alliancesnare_agentMatch0.9.7a
OR
intersect_alliancesnare_agentMatch0.9.8
OR
intersect_alliancesnare_agentMatch1.0
OR
intersect_alliancesnare_agentMatch1.1
OR
intersect_alliancesnare_agentMatch1.2
OR
intersect_alliancesnare_agentMatch1.3
OR
intersect_alliancesnare_agentMatch1.4
OR
intersect_alliancesnare_agentMatch1.4.1
AND
linuxlinux_kernelMatch-
Node
intersect_alliancesnare_agentRange≤1.4
OR
intersect_alliancesnare_agentMatch1.0
OR
intersect_alliancesnare_agentMatch1.2
OR
intersect_alliancesnare_agentMatch1.3
AND
sgiirix
Node
intersect_alliancesnare_epilogRange≤1.5.3
OR
intersect_alliancesnare_epilogMatch1.1
OR
intersect_alliancesnare_epilogMatch1.2
OR
intersect_alliancesnare_epilogMatch1.3
OR
intersect_alliancesnare_epilogMatch1.3.1
OR
intersect_alliancesnare_epilogMatch1.3.3
OR
intersect_alliancesnare_epilogMatch1.4.0
OR
intersect_alliancesnare_epilogMatch1.5.0
OR
intersect_alliancesnare_epilogMatch1.5.1
OR
intersect_alliancesnare_epilogMatch1.5.2
AND
microsoftwindows
Node
intersect_alliancesnare_epilogRange≤1.2
OR
intersect_alliancesnare_epilogMatch1.1
AND
unixunix
Node
intersect_alliancesnare_agentRange≤1.5.0
OR
intersect_alliancesnare_agentMatch1.0
OR
intersect_alliancesnare_agentMatch1.2
OR
intersect_alliancesnare_agentMatch1.3
OR
intersect_alliancesnare_agentMatch1.4
AND
ibmaix
Node
intersect_alliancesnare_agentRange≤1.1.4
OR
intersect_alliancesnare_agentMatch1.0
OR
intersect_alliancesnare_agentMatch1.0.1
OR
intersect_alliancesnare_agentMatch1.1.0
OR
intersect_alliancesnare_agentMatch1.1.1
OR
intersect_alliancesnare_agentMatch1.1.2
AND
microsoftwindows_7
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_vista
VendorProductVersionCPE
intersect_alliancesnare_agent*cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.0cpe:2.3:a:intersect_alliance:snare_agent:2.0:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.1cpe:2.3:a:intersect_alliance:snare_agent:2.1:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.3cpe:2.3:a:intersect_alliance:snare_agent:2.3:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.4cpe:2.3:a:intersect_alliance:snare_agent:2.4:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.5cpe:2.3:a:intersect_alliance:snare_agent:2.5:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.5.2cpe:2.3:a:intersect_alliance:snare_agent:2.5.2:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.5.3cpe:2.3:a:intersect_alliance:snare_agent:2.5.3:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.5.4cpe:2.3:a:intersect_alliance:snare_agent:2.5.4:*:*:*:*:*:*:*
intersect_alliancesnare_agent2.5.6cpe:2.3:a:intersect_alliance:snare_agent:2.5.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 581

Related

prion 1
kaspersky 1
nvd 1
cvelist 1
prion
prion
Cross site request forgery (csrf)
2010-07-02 12:43:00
kaspersky
kaspersky
KLA10331 SB vulnerability in Snare
2010-07-02 00:00:00
nvd
nvd
CVE-2010-2594
2010-07-02 12:43:52
cvelist
cvelist
CVE-2010-2594
2010-07-01 18:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON
Related for CVE-2010-2594
prion1kaspersky1nvd1cvelist1