Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-2330
HistoryAug 31, 2015 - 6:59 p.m.

CVE-2014-2330

2015-08-3118:59:00
CWE-352
[email protected]
web.nvd.nist.gov
23
cve-2014-2330
csrf
multisite gui
check_mk
security vulnerability
nvd

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.8%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the Multisite GUI in Check_MK before 1.2.5i2 allow remote attackers to hijack the authentication of users for requests that (1) upload arbitrary snapshots, (2) delete arbitrary files, or possibly have other unspecified impact via unknown vectors.

Related

prion 3
ubuntucve 3
seebug 1
cve 2
nessus 8
fedora 8
securityvulns 2
openvas 10
prion
prion
Cross site request forgery (csrf)
2015-08-31 18:59:00
Design/Logic Flaw
2015-08-31 18:59:00
Code injection
2015-08-31 18:59:00
ubuntucve
ubuntucve
CVE-2014-2330
2015-08-31 00:00:00
CVE-2014-2332
2015-08-31 00:00:00
CVE-2014-2331
2015-08-31 00:00:00
seebug
seebug
Check_MK跨站请求伪造漏洞(CVE-2014-2330)
2014-03-27 00:00:00
cve
cve
CVE-2014-2331
2015-08-31 18:59:00
CVE-2014-2332
2015-08-31 18:59:00
nessus
nessus
Fedora 19 : check-mk-1.2.4p2-2.fc19 (2014-6818)
2014-06-10 00:00:00
Fedora 20 : check-mk-1.2.4p2-2.fc20 (2014-6810)
2014-06-10 00:00:00
Fedora 19 : check-mk-1.2.4p2-1.fc19 (2014-5139)
2014-04-25 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: check-mk-1.2.4p2-1.fc20
2014-04-24 07:38:04
[SECURITY] Fedora 19 Update: check-mk-1.2.4p2-1.fc19
2014-04-24 07:34:24
[SECURITY] Fedora 19 Update: check-mk-1.2.4p2-2.fc19
2014-06-10 03:08:54
securityvulns
securityvulns
Deutsche Telekom CERT Advisory [DTC-A-20140324-002] update140328 - vulnerabilities in check_mk
2014-05-05 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-05 00:00:00
openvas
openvas
Fedora Update for check-mk FEDORA-2014-5139
2014-05-02 00:00:00
Fedora Update for check-mk FEDORA-2014-5139
2014-05-02 00:00:00
Fedora Update for check-mk FEDORA-2014-5194
2014-05-02 00:00:00

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.8%

JSON
Related for CVE-2014-2330
prion3ubuntucve3seebug1cve2nessus8fedora8securityvulns2openvas10