Lucene search
HistoryApr 28, 2009 - 4:30 p.m.
CVE-2009-1455
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.002
Percentile
60.8%
Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact.
Affected configurations
Node
andrew_simpsonwebcollabMatch2.20
ORandrew_simpsonwebcollabMatch2.30
ORandrew_simpsonwebcollabMatch2.31
ORandrew_simpsonwebcollabMatch2.40
| Vendor | Product | Version | CPE |
|---|---|---|---|
| andrew_simpson | webcollab | 2.20 | cpe:2.3:a:andrew_simpson:webcollab:2.20:*:*:*:*:*:*:* |
| andrew_simpson | webcollab | 2.30 | cpe:2.3:a:andrew_simpson:webcollab:2.30:*:*:*:*:*:*:* |
| andrew_simpson | webcollab | 2.31 | cpe:2.3:a:andrew_simpson:webcollab:2.31:*:*:*:*:*:*:* |
| andrew_simpson | webcollab | 2.40 | cpe:2.3:a:andrew_simpson:webcollab:2.40:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-1455
2009-04-28 16:00:00
prion
prion
Cross site request forgery (csrf)
2009-04-28 16:30:00
cve
cve
CVE-2009-1455
2009-04-28 16:30:03
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.002
Percentile
60.8%
Related for NVD:CVE-2009-1455