Lucene search

PRIOn knowledge basePRION:CVE-2015-3624

HistoryJun 09, 2015 - 2:59 p.m.

Cross site request forgery (csrf)

2015-06-0914:59:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.009 Low

EPSS

Percentile

81.9%

JSON

Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.120) allows remote attackers to hijack the authentication of content administrators for requests that delete content via a delete action.

CPENameOperatorVersion
ektron_content_management_systemle9.1

CPE	Name	Operator	Version
	ektron_content_management_system	le	9.1

References

packetstormsecurity.com/files/132104/Ektron-CMS-9.10-SP1-Cross-Site-Request-Forgery.html

v00d00sec.com/2015/05/31/cve-2015-3624-csrf-and-xss-vulnerabilities-in-ektron-cms-9-10-sp1/

www.securityfocus.com/archive/1/535646/100/0/threaded

www.securityfocus.com/bid/74937

www.exploit-db.com/exploits/37296/

7.4 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.009 Low

EPSS

Percentile

81.9%

JSON

Related for PRION:CVE-2015-3624