Lucene search
PRIOn knowledge basePRION:CVE-2013-6357HistoryNov 13, 2013 - 3:55 p.m.
Cross site request forgery (csrf)
2013-11-1315:55:00
PRIOn knowledge base
www.prio-n.com
1
Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a /manager/html/undeploy?path= URI. NOTE: the vendor disputes the significance of this report, stating that "the Apache Tomcat Security team has not accepted any reports of CSRF attacks against the Manager application β¦ as they require a reckless system administrator.
Related
packetstorm
packetstorm
Apache Tomcat 5.5.25 Cross Site Request Forgery
2013-11-04 00:00:00
exploitpack
exploitpack
Apache Tomcat 5.5.25 - Cross-Site Request Forgery
2013-11-04 00:00:00
ubuntucve
ubuntucve
CVE-2013-6357
2013-11-13 00:00:00
openvas
openvas
Apache Tomcat <= 5.5.25 CSRF Vulnerability - Windows
2021-03-18 00:00:00
Apache Tomcat <= 5.5.25 CSRF Vulnerability - Linux
2021-03-18 00:00:00
nvd
nvd
CVE-2013-6357
2013-11-13 15:55:04
zdt
zdt
Apache Tomcat 5.5.25 CSRF Vulnerabilities
2013-11-04 00:00:00
seebug
seebug
Apache Tomcat 5.5.25 - CSRF Vulnerabilities
2014-07-01 00:00:00
Apache Tomcat 5.5.25θ·¨η«θ―·ζ±δΌͺι ζΌζ΄
2013-12-16 00:00:00
cve
cve
CVE-2013-6357
2022-10-03 16:14:51
veracode
veracode
Cross-site Request Forgery (CSRF)
2019-03-25 08:40:43
cvelist
cvelist
CVE-2013-6357
2022-10-03 16:14:51
exploitdb
exploitdb
Apache Tomcat 5.5.25 - Cross-Site Request Forgery
2013-11-04 00:00:00
nessus
nessus
RHEL 5 : tomcat5 (Unpatched Vulnerability)
2024-06-03 00:00:00
ibm
ibm