Lucene search

MitreCVE-2013-2754

HistoryMar 11, 2014 - 7:37 p.m.

CVE-2013-2754

2014-03-1119:37:01

CWE-352

mitre

web.nvd.nist.gov

cve

2013

2754

csrf

vulnerability

umisoft

umi.cms

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.011

Percentile

84.3%

JSON

Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/.

Affected configurations

Nvd

Node

umi-cmsumi.cmsRange≤2.9

umi-cmsumi.cmsMatch2.3.3.9

umi-cmsumi.cmsMatch2.5.0

umi-cmsumi.cmsMatch2.5.2

umi-cmsumi.cmsMatch2.5.3

umi-cmsumi.cmsMatch2.6

umi-cmsumi.cmsMatch2.6.1

umi-cmsumi.cmsMatch2.6.2

umi-cmsumi.cmsMatch2.6.3

umi-cmsumi.cmsMatch2.6.4

umi-cmsumi.cmsMatch2.6.5

umi-cmsumi.cmsMatch2.6.7

umi-cmsumi.cmsMatch2.6.8

umi-cmsumi.cmsMatch2.7.0

umi-cmsumi.cmsMatch2.7.2

umi-cmsumi.cmsMatch2.7.3

umi-cmsumi.cmsMatch2.7.4

umi-cmsumi.cmsMatch2.8.0

umi-cmsumi.cmsMatch2.8.0.5

umi-cmsumi.cmsMatch2.8.1

umi-cmsumi.cmsMatch2.8.1.2

umi-cmsumi.cmsMatch2.8.1.3

umi-cmsumi.cmsMatch2.8.2

umi-cmsumi.cmsMatch2.8.3

umi-cmsumi.cmsMatch2.8.4

umi-cmsumi.cmsMatch2.8.4.1

umi-cmsumi.cmsMatch2.8.4.2

umi-cmsumi.cmsMatch2.8.4.3

umi-cmsumi.cmsMatch2.8.4.4

umi-cmsumi.cmsMatch2.8.5

umi-cmsumi.cmsMatch2.8.5.1

umi-cmsumi.cmsMatch2.8.5.2

umi-cmsumi.cmsMatch2.8.5.3

umi-cmsumi.cmsMatch2.8.6

umi-cmsumi.cmsMatch2.8.6.1

VendorProductVersionCPE
umi-cmsumi.cms*cpe:2.3:a:umi-cms:umi.cms:*:*:*:*:*:*:*:*
umi-cmsumi.cms2.3.3.9cpe:2.3:a:umi-cms:umi.cms:2.3.3.9:*:*:*:*:*:*:*
umi-cmsumi.cms2.5.0cpe:2.3:a:umi-cms:umi.cms:2.5.0:*:*:*:*:*:*:*
umi-cmsumi.cms2.5.2cpe:2.3:a:umi-cms:umi.cms:2.5.2:*:*:*:*:*:*:*
umi-cmsumi.cms2.5.3cpe:2.3:a:umi-cms:umi.cms:2.5.3:*:*:*:*:*:*:*
umi-cmsumi.cms2.6cpe:2.3:a:umi-cms:umi.cms:2.6:*:*:*:*:*:*:*
umi-cmsumi.cms2.6.1cpe:2.3:a:umi-cms:umi.cms:2.6.1:*:*:*:*:*:*:*
umi-cmsumi.cms2.6.2cpe:2.3:a:umi-cms:umi.cms:2.6.2:*:*:*:*:*:*:*
umi-cmsumi.cms2.6.3cpe:2.3:a:umi-cms:umi.cms:2.6.3:*:*:*:*:*:*:*
umi-cmsumi.cms2.6.4cpe:2.3:a:umi-cms:umi.cms:2.6.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
umi-cms	umi.cms	*	cpe:2.3:a:umi-cms:umi.cms::::::::
umi-cms	umi.cms	2.3.3.9	cpe:2.3:a:umi-cms:umi.cms:2.3.3.9:::::::*
umi-cms	umi.cms	2.5.0	cpe:2.3:a:umi-cms:umi.cms:2.5.0:::::::*
umi-cms	umi.cms	2.5.2	cpe:2.3:a:umi-cms:umi.cms:2.5.2:::::::*
umi-cms	umi.cms	2.5.3	cpe:2.3:a:umi-cms:umi.cms:2.5.3:::::::*
umi-cms	umi.cms	2.6	cpe:2.3:a:umi-cms:umi.cms:2.6:::::::*
umi-cms	umi.cms	2.6.1	cpe:2.3:a:umi-cms:umi.cms:2.6.1:::::::*
umi-cms	umi.cms	2.6.2	cpe:2.3:a:umi-cms:umi.cms:2.6.2:::::::*
umi-cms	umi.cms	2.6.3	cpe:2.3:a:umi-cms:umi.cms:2.6.3:::::::*
umi-cms	umi.cms	2.6.4	cpe:2.3:a:umi-cms:umi.cms:2.6.4:::::::*