Lucene search
HistoryDec 31, 2014 - 10:59 p.m.
CVE-2014-9431
cve-2014-9431
csrf
vulnerabilities
smoothwall express
authentication hijack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.5%
Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that change the (1) admin or (2) dial password via a request to httpd/cgi-bin/changepw.cgi.
Affected configurations
Node
smoothwallsmoothwallMatch3.0sp3express
ORsmoothwallsmoothwallMatch3.1express
| CPE | Name | Operator | Version |
|---|---|---|---|
| smoothwall:smoothwall | smoothwall | eq | 3.0 |
| smoothwall:smoothwall | smoothwall | eq | 3.1 |
Related
prion
prion
Cross site request forgery (csrf)
2014-12-31 22:59:00
cvelist
cvelist
CVE-2014-9431
2014-12-31 22:00:00
nvd
nvd
CVE-2014-9431
2014-12-31 22:59:07
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.5%
Related for CVE-2014-9431