Lucene search

JpcertCVE-2012-1237

HistoryApr 06, 2012 - 6:55 p.m.

CVE-2012-1237

2012-04-0618:55:01

CWE-352

jpcert

web.nvd.nist.gov

vulnerability

csrf

sencha sns

remote attackers

authentication

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

52.7%

JSON

Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users.

Affected configurations

Nvd

Node

iczsencha_snsRange≤1.0.1

iczsencha_snsMatch1.0.0

VendorProductVersionCPE
iczsencha_sns*cpe:2.3:a:icz:sencha_sns:*:*:*:*:*:*:*:*
iczsencha_sns1.0.0cpe:2.3:a:icz:sencha_sns:1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
icz	sencha_sns	*	cpe:2.3:a:icz:sencha_sns::::::::
icz	sencha_sns	1.0.0	cpe:2.3:a:icz:sencha_sns:1.0.0:::::::*

References

jvn.jp/en/jp/JVN44913777/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000029

oss.icz.co.jp/news/?p=501

www.securityfocus.com/bid/52900

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

52.7%

JSON

Related for CVE-2012-1237