Lucene search

K
cve[email protected]CVE-2011-1721
HistoryApr 19, 2011 - 7:55 p.m.

CVE-2011-1721

2011-04-1919:55:01
CWE-352
web.nvd.nist.gov
23
csrf
vulnerability
webjaxe
authentication
admin tasks

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that (1) modify passwords or (2) add new projects. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
obspmwebjaxeMatch1.02
CPENameOperatorVersion
obspm:webjaxeobspm webjaxeeq1.02

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

Related for CVE-2011-1721