Lucene search
PRIOn knowledge basePRION:CVE-2015-4460HistoryJul 16, 2015 - 8:59 p.m.
Cross site request forgery (csrf)
2015-07-1620:59:00
PRIOn knowledge base
www.prio-n.com
3
7.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.6%
Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors.
Related
securityvulns
securityvulns
CSRF Vulnerability in C2Box application CVE-2015-4460
2015-07-05 00:00:00
cve
cve
CVE-2015-4460
2015-07-16 20:59:00
exploitpack
exploitpack
C2Box 4.0.0(r19171) - Cross-Site Request Forgery
2015-06-30 00:00:00
packetstorm
packetstorm
C2Box 4.0.0 r19171 Cross Site Request Forgery
2015-06-28 00:00:00
zdt
zdt
C2Box 4.0.0(r19171) - CSRF Vulnerability
2015-07-01 00:00:00
exploitdb
exploitdb
C2Box 4.0.0(r19171) - Cross-Site Request Forgery
2015-06-30 00:00:00
7.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.6%
Related for PRION:CVE-2015-4460