Lucene search

MitreCVE-2010-5320

HistoryJan 03, 2015 - 11:59 a.m.

CVE-2010-5320

2015-01-0311:59:05

CWE-352

mitre

web.nvd.nist.gov

cve-2010-5320

cross-site request forgery

csrf vulnerabilities

memht portal 4.0.1

remote attackers

authentication hijacking

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a configuration action to admin.php, (2) modify articles via an articles action to admin.php, or (3) modify credentials via a users action to admin.php.

Affected configurations

Nvd

Node

memhtmemht_portalMatch4.0.1

VendorProductVersionCPE
memhtmemht_portal4.0.1cpe:2.3:a:memht:memht_portal:4.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
memht	memht_portal	4.0.1	cpe:2.3:a:memht:memht_portal:4.0.1:::::::*

References

www.htbridge.com/advisory/HTB22662

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Related for CVE-2010-5320