Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-7431
HistoryMay 03, 2017 - 5:59 a.m.

CVE-2017-7431

2017-05-0305:59:00
CWE-352
[email protected]
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

Affected configurations

Nvd
Node
novellimanagerMatch2.7
OR
novellimanagerMatch2.7sp1
OR
novellimanagerMatch2.7sp2
OR
novellimanagerMatch2.7sp3
OR
novellimanagerMatch2.7sp4
OR
novellimanagerMatch2.7sp4_patch1
OR
novellimanagerMatch2.7sp4_patch2
OR
novellimanagerMatch2.7sp4_patch3
OR
novellimanagerMatch2.7sp4_patch4
OR
novellimanagerMatch2.7sp5
OR
novellimanagerMatch2.7sp6
OR
novellimanagerMatch2.7sp7
OR
novellimanagerMatch2.7sp7_patch_1
OR
novellimanagerMatch2.7sp7_patch_10
OR
novellimanagerMatch2.7sp7_patch_2
OR
novellimanagerMatch2.7sp7_patch_3
OR
novellimanagerMatch2.7sp7_patch_4
OR
novellimanagerMatch2.7sp7_patch_5
OR
novellimanagerMatch2.7sp7_patch_6
OR
novellimanagerMatch2.7sp7_patch_7
OR
novellimanagerMatch2.7sp7_patch_8
OR
novellimanagerMatch2.7sp7_patch_9
Node
netiqimanagerMatch3.0
OR
netiqimanagerMatch3.0.1
OR
netiqimanagerMatch3.0.2
OR
netiqimanagerMatch3.0.2.1
OR
netiqimanagerMatch3.0.3
OR
netiqimanagerMatch3.0.3.1
VendorProductVersionCPE
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:*:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp1:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp2:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp3:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp4:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp4_patch1:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp4_patch2:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp4_patch3:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp4_patch4:*:*:*:*:*:*
novellimanager2.7cpe:2.3:a:novell:imanager:2.7:sp5:*:*:*:*:*:*
Rows per page:
1-10 of 281

Related

cvelist 1
cve 1
prion 1
cvelist
cvelist
CVE-2017-7431
2017-05-03 05:13:00
cve
cve
CVE-2017-7431
2017-05-03 05:59:00
prion
prion
Cross site request forgery (csrf)
2017-05-03 05:59:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON
Related for NVD:CVE-2017-7431
cvelist1cve1prion1