Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3583
cve-2013-3583
csrf
saveproperties.html
corporater epm suite
remote attackers
authentication
hijack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.1%
Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.
Affected configurations
Node
corporaterepm_suiteMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| corporater:epm_suite | corporater epm suite | eq | - |
References
Related
prion
prion
Cross site request forgery (csrf)
2013-08-28 13:09:00
cvelist
cvelist
CVE-2013-3583
2022-10-03 16:14:45
nvd
nvd
CVE-2013-3583
2013-08-28 13:09:15
cert
cert
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.1%
Related for CVE-2013-3583