Lucene search

CertccCVE-2015-2861

HistoryJun 18, 2015 - 10:59 a.m.

CVE-2015-2861

2015-06-1810:59:00

CWE-352

certcc

web.nvd.nist.gov

cve-2015-2861

csrf

vulnerability

vesta control panel

nvd

security

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

51.6%

JSON

Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.

Affected configurations

Nvd

Node

vestacpvesta_control_panelRange≤0.9.8-12

VendorProductVersionCPE
vestacpvesta_control_panel*cpe:2.3:a:vestacp:vesta_control_panel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vestacp	vesta_control_panel	*	cpe:2.3:a:vestacp:vesta_control_panel::::::::

References

vestacp.com/roadmap/#history

www.kb.cert.org/vuls/id/842780

www.securityfocus.com/bid/75215

github.com/serghey-rodin/vesta/commit/527e4a9a62204be9b34c1338fadfe959b0fd3974

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

51.6%

JSON

Related for CVE-2015-2861