CVE-2012-2605

2022-10-0316:15:35

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-2605

csrf

cross-site request forgery

bradford network sentry

authentication hijacking

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients.

Affected configurations

NVD

Node

bradfordnetworksnetwork_sentry_appliance_softwareRange≤5.3

AND

bradfordnetworksnetwork_sentry_applianceMatchns500rx

bradfordnetworksnetwork_sentry_applianceMatchns500x

CPENameOperatorVersion
bradfordnetworks:network_sentry_appliance_softwarebradfordnetworks network sentry appliance softwarele5.3
bradfordnetworks:network_sentry_appliancebradfordnetworks network sentry applianceeqns500rx
bradfordnetworks:network_sentry_appliancebradfordnetworks network sentry applianceeqns500x

CPE	Name	Operator	Version
bradfordnetworks:network_sentry_appliance_software	bradfordnetworks network sentry appliance software	le	5.3
bradfordnetworks:network_sentry_appliance	bradfordnetworks network sentry appliance	eq	ns500rx
bradfordnetworks:network_sentry_appliance	bradfordnetworks network sentry appliance	eq	ns500x