Lucene search

MitreCVE-2012-4002

HistoryOct 09, 2012 - 11:55 p.m.

CVE-2012-4002

2012-10-0923:55:04

CWE-352

mitre

web.nvd.nist.gov

cve-2012-4002

cross-site request forgery

csrf vulnerability

glpi-project

glpi

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

64.5%

JSON

Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

Nvd

Node

glpi-projectglpiRange≤0.83.2

glpi-projectglpiMatch0.5

glpi-projectglpiMatch0.5rc1

glpi-projectglpiMatch0.5rc2

glpi-projectglpiMatch0.6

glpi-projectglpiMatch0.6rc1

glpi-projectglpiMatch0.6rc2

glpi-projectglpiMatch0.6rc3

glpi-projectglpiMatch0.20

glpi-projectglpiMatch0.21

glpi-projectglpiMatch0.30

glpi-projectglpiMatch0.31

glpi-projectglpiMatch0.40

glpi-projectglpiMatch0.41

glpi-projectglpiMatch0.42

glpi-projectglpiMatch0.51

glpi-projectglpiMatch0.51a

glpi-projectglpiMatch0.65

glpi-projectglpiMatch0.65rc1

glpi-projectglpiMatch0.65rc2

glpi-projectglpiMatch0.68

glpi-projectglpiMatch0.68rc1

glpi-projectglpiMatch0.68rc2

glpi-projectglpiMatch0.68rc3

glpi-projectglpiMatch0.68.1

glpi-projectglpiMatch0.68.2

glpi-projectglpiMatch0.68.3

glpi-projectglpiMatch0.70

glpi-projectglpiMatch0.70rc1

glpi-projectglpiMatch0.70rc2

glpi-projectglpiMatch0.70rc3

glpi-projectglpiMatch0.70.1

glpi-projectglpiMatch0.70.2

glpi-projectglpiMatch0.71

glpi-projectglpiMatch0.71.1

glpi-projectglpiMatch0.71.1rc1

glpi-projectglpiMatch0.71.1rc2

glpi-projectglpiMatch0.71.1rc3

glpi-projectglpiMatch0.71.2

glpi-projectglpiMatch0.71.3

glpi-projectglpiMatch0.71.4

glpi-projectglpiMatch0.71.5

glpi-projectglpiMatch0.71.6

glpi-projectglpiMatch0.72

glpi-projectglpiMatch0.72rc1

glpi-projectglpiMatch0.72rc2

glpi-projectglpiMatch0.72rc3

glpi-projectglpiMatch0.72.1

glpi-projectglpiMatch0.72.2

glpi-projectglpiMatch0.72.3

glpi-projectglpiMatch0.72.4

glpi-projectglpiMatch0.78

glpi-projectglpiMatch0.78.1

glpi-projectglpiMatch0.78.2

glpi-projectglpiMatch0.78.3

glpi-projectglpiMatch0.78.4

glpi-projectglpiMatch0.78.5

glpi-projectglpiMatch0.80

glpi-projectglpiMatch0.80.1

glpi-projectglpiMatch0.80.2

glpi-projectglpiMatch0.80.3

glpi-projectglpiMatch0.80.4

glpi-projectglpiMatch0.80.5

glpi-projectglpiMatch0.80.6

glpi-projectglpiMatch0.80.7

glpi-projectglpiMatch0.80.61

glpi-projectglpiMatch0.83

glpi-projectglpiMatch0.83.1

VendorProductVersionCPE
glpi-projectglpi*cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
glpi-projectglpi0.5cpe:2.3:a:glpi-project:glpi:0.5:*:*:*:*:*:*:*
glpi-projectglpi0.5cpe:2.3:a:glpi-project:glpi:0.5:rc1:*:*:*:*:*:*
glpi-projectglpi0.5cpe:2.3:a:glpi-project:glpi:0.5:rc2:*:*:*:*:*:*
glpi-projectglpi0.6cpe:2.3:a:glpi-project:glpi:0.6:*:*:*:*:*:*:*
glpi-projectglpi0.6cpe:2.3:a:glpi-project:glpi:0.6:rc1:*:*:*:*:*:*
glpi-projectglpi0.6cpe:2.3:a:glpi-project:glpi:0.6:rc2:*:*:*:*:*:*
glpi-projectglpi0.6cpe:2.3:a:glpi-project:glpi:0.6:rc3:*:*:*:*:*:*
glpi-projectglpi0.20cpe:2.3:a:glpi-project:glpi:0.20:*:*:*:*:*:*:*
glpi-projectglpi0.21cpe:2.3:a:glpi-project:glpi:0.21:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
glpi-project	glpi	*	cpe:2.3:a:glpi-project:glpi::::::::
glpi-project	glpi	0.5	cpe:2.3:a:glpi-project:glpi:0.5:::::::*
glpi-project	glpi	0.5	cpe:2.3:a:glpi-project:glpi:0.5:rc1::::::
glpi-project	glpi	0.5	cpe:2.3:a:glpi-project:glpi:0.5:rc2::::::
glpi-project	glpi	0.6	cpe:2.3:a:glpi-project:glpi:0.6:::::::*
glpi-project	glpi	0.6	cpe:2.3:a:glpi-project:glpi:0.6:rc1::::::
glpi-project	glpi	0.6	cpe:2.3:a:glpi-project:glpi:0.6:rc2::::::
glpi-project	glpi	0.6	cpe:2.3:a:glpi-project:glpi:0.6:rc3::::::
glpi-project	glpi	0.20	cpe:2.3:a:glpi-project:glpi:0.20:::::::*
glpi-project	glpi	0.21	cpe:2.3:a:glpi-project:glpi:0.21:::::::*

Rows per page:

1-10 of 681

References

www.mandriva.com/security/advisories?name=MDVSA-2012:132

www.openwall.com/lists/oss-security/2012/07/13/1

forge.indepnet.net/issues/3704

forge.indepnet.net/issues/3707

forge.indepnet.net/projects/glpi/versions/771

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.002

Percentile

64.5%

JSON

Related for CVE-2012-4002