Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-0303
cve-2012-0303
cross-site request forgery
csrf
brightmail control center
symantec message filter
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.7%
Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) execute application commands or (2) create admin accounts.
Affected configurations
Node
symantecmessage_filterRange≤6.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| symantec:message_filter | symantec message filter | le | 6.3 |
References
Social References
More
Related
prion
prion
Cross site request forgery (csrf)
2012-07-05 17:55:00
cvelist
cvelist
CVE-2012-0303
2022-10-03 16:15:41
nvd
nvd
CVE-2012-0303
2012-07-05 17:55:01
openvas
openvas
Symantec Message Filter Multiple Vulnerabilities
2012-06-27 00:00:00
Symantec Message Filter Multiple Vulnerabilities
2012-06-27 00:00:00
nessus
nessus
Symantec Message Filter Multiple Vulnerabilities (SYM12-010)
2012-07-03 00:00:00
symantec
symantec
Symantec Message Filter Security Issues
2012-06-26 08:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.7%
Related for CVE-2012-0303