Lucene search
HistorySep 07, 2010 - 6:00 p.m.
CVE-2010-3213
cve-2010-3213
csrf
microsoft
outlook web access
owa
sp2
vulnerability
security
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
Affected configurations
Node
microsoftoutlook_web_accessMatch2007
ORmicrosoftoutlook_web_accessMatch2007sp1
ORmicrosoftoutlook_web_accessMatch2007sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:outlook_web_access | microsoft outlook web access | eq | 2007 |
Related
cvelist
cvelist
CVE-2010-3213
2010-09-07 17:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Cross site request forgery (csrf)
2010-09-07 18:00:00
nvd
nvd
CVE-2010-3213
2010-09-07 18:00:02
nessus
nessus
MS KB2401593: Microsoft Outlook Web Access (OWA) CSRF
2010-09-17 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2010-3213