Lucene search
Ubuntu.comUB:CVE-2010-2234HistoryAug 19, 2010 - 12:00 a.m.
CVE-2010-2234
2010-08-1900:00:00
ubuntu.com
ubuntu.com
13
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.8%
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0
through 0.11.0 allows remote attackers to hijack the authentication of
administrators for direct requests to an installation URL.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=624764>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570013>
Notes
| Author | Note |
|---|---|
| jdstrand | backport is regression prone |
Related
openvas
openvas
Apache CouchDB < 0.11.1 CSRF Vulnerability
2010-08-30 00:00:00
Apache CouchDB Cross Site Request Forgery Vulnerability
2010-08-30 00:00:00
Fedora Update for couchdb FEDORA-2010-13665
2010-09-22 00:00:00
securityvulns
securityvulns
CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
2010-08-21 00:00:00
prion
prion
Cross site request forgery (csrf)
2010-08-19 22:00:00
cve
cve
CVE-2010-2234
2010-08-19 22:00:00
nessus
nessus
Apache CouchDB < 0.11.2 Futon admin interface Cross-Site Request Forgery
2010-08-20 00:00:00
Fedora 12 : couchdb-0.11.2-2.fc12 (2010-13665)
2010-09-21 00:00:00
Fedora 13 : couchdb-0.11.2-2.fc13 (2010-13640)
2010-09-21 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: couchdb-0.11.2-2.fc13
2010-09-21 01:42:25
[SECURITY] Fedora 12 Update: couchdb-0.11.2-2.fc12
2010-09-21 01:33:03
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
43.8%
Related for UB:CVE-2010-2234