Lucene search
HistoryMay 03, 2012 - 4:08 a.m.
CVE-2012-0730
cve-2012-0730
cross-site request forgery
ibm rational appscan enterprise
remote attackers
authentication hijacking
administrative accounts
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
48.7%
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected configurations
Node
ibmrational_appscanMatch5.2enterprise
ORibmrational_appscanMatch5.4enterprise
ORibmrational_appscanMatch5.5.0enterprise
ORibmrational_appscanMatch5.5.0.1enterprise
ORibmrational_appscanMatch5.5.0.2enterprise
ORibmrational_appscanMatch5.6.0enterprise
ORibmrational_appscanMatch5.6.0.3enterprise
ORibmrational_appscanMatch8.0.0enterprise
ORibmrational_appscanMatch8.0.0.1enterprise
ORibmrational_appscanMatch8.0.0.2enterprise
ORibmrational_appscanMatch8.0.0.3enterprise
ORibmrational_appscanMatch8.0.1enterprise
ORibmrational_appscanMatch8.0.1.1enterprise
ORibmrational_appscanMatch8.5.0enterprise
ORibmrational_appscanMatch8.5.0.0enterprise
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | rational_appscan | 5.2 | cpe:2.3:a:ibm:rational_appscan:5.2:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.4 | cpe:2.3:a:ibm:rational_appscan:5.4:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.5.0 | cpe:2.3:a:ibm:rational_appscan:5.5.0:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.5.0.1 | cpe:2.3:a:ibm:rational_appscan:5.5.0.1:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.5.0.2 | cpe:2.3:a:ibm:rational_appscan:5.5.0.2:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.6.0 | cpe:2.3:a:ibm:rational_appscan:5.6.0:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 5.6.0.3 | cpe:2.3:a:ibm:rational_appscan:5.6.0.3:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 8.0.0 | cpe:2.3:a:ibm:rational_appscan:8.0.0:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 8.0.0.1 | cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:enterprise:*:*:*:*:* |
| ibm | rational_appscan | 8.0.0.2 | cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:enterprise:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2012-05-03 04:08:00
cvelist
cvelist
CVE-2012-0730
2012-05-03 01:00:00
cve
cve
CVE-2012-0730
2012-05-03 04:08:24
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
48.7%
Related for NVD:CVE-2012-0730