CVE-2009-1733

2009-05-2019:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

52.7%

JSON

Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors.

References

holisticinfosec.org/content/view/113/45/

osvdb.org/54601

secunia.com/advisories/34985

exchange.xforce.ibmcloud.com/vulnerabilities/50632