Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-2940
HistoryApr 13, 2015 - 12:00 a.m.

CVE-2015-2940

2015-04-1300:00:00
ubuntu.com
ubuntu.com
10

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.003

Percentile

70.6%

Cross-site request forgery (CSRF) vulnerability in the CheckUser extension
for MediaWiki allows remote attackers to hijack the authentication of
certain users for requests that retrieve sensitive user information via
unspecified vectors.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.003

Percentile

70.6%