Lucene search
PRIOn knowledge basePRION:CVE-2013-5443HistoryMar 25, 2014 - 8:55 p.m.
Cross site request forgery (csrf)
2014-03-2520:55:00
PRIOn knowledge base
www.prio-n.com
3
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.5%
Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cognos_express | eq | 10.1 | |
| cognos_express | eq | 10.2.1 | |
| cognos_express | eq | 9.5 | |
| cognos_express | eq | 9.0 |
Related
cve
cve
CVE-2013-5443
2014-03-25 20:55:00
seebug
seebug
IBM Cognos Express跨站请求伪造漏洞
2014-03-25 00:00:00
7.5 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.5%
Related for PRION:CVE-2013-5443