Lucene search

K
cve[email protected]CVE-2013-7256
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-7256

2022-10-0316:14:52
CWE-352
web.nvd.nist.gov
20
cve-2013-7256
csrf
opsview
vulnerability
remote attack

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.7%

Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

NVD
Node
opsviewopsviewRange4.4.1
OR
opsviewopsviewMatch2.7
OR
opsviewopsviewMatch2.8
OR
opsviewopsviewMatch2.10
OR
opsviewopsviewMatch2.12
OR
opsviewopsviewMatch2.14
OR
opsviewopsviewMatch3.0-community
OR
opsviewopsviewMatch3.1-community
OR
opsviewopsviewMatch3.2-enterprise
OR
opsviewopsviewMatch3.4-enterprise
OR
opsviewopsviewMatch3.6-enterprise
OR
opsviewopsviewMatch3.8-enterprise
OR
opsviewopsviewMatch3.10-enterprise
OR
opsviewopsviewMatch3.12-enterprise
OR
opsviewopsviewMatch3.14-enterprise
OR
opsviewopsviewMatch4.0-enterprise
OR
opsviewopsviewMatch4.0-pro
OR
opsviewopsviewMatch4.1-enterprise
OR
opsviewopsviewMatch4.1-pro
OR
opsviewopsviewMatch4.2-enterprise
OR
opsviewopsviewMatch4.2-pro
OR
opsviewopsviewMatch4.3-enterprise
OR
opsviewopsviewMatch4.3-pro
OR
opsviewopsviewMatch4.4-enterprise
OR
opsviewopsviewMatch4.4-pro
OR
opsviewopsviewMatch4.4.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.7%

Related for CVE-2013-7256