Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-9064
HistoryMay 18, 2017 - 12:00 a.m.

CVE-2017-9064

2017-05-1800:00:00
ubuntu.com
ubuntu.com
14

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.9%

JSON

In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF)
vulnerability exists in the filesystem credentials dialog because a nonce
is not required for updating credentials.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchwordpress< anyUNKNOWN

Related

osv 3
prion 1
cvelist 1
debiancve 1
wpvulndb 1
cve 1
nvd 1
debian 3
nessus 14
openvas 5
osv
osv
CVE-2017-9064
2017-05-18 14:29:00
wordpress - security update
2017-06-01 00:00:00
wordpress - security update
2017-06-02 00:00:00
prion
prion
Cross site request forgery (csrf)
2017-05-18 14:29:00
cvelist
cvelist
CVE-2017-9064
2017-05-18 14:00:00
debiancve
debiancve
CVE-2017-9064
2017-05-18 14:29:00
wpvulndb
wpvulndb
WordPress 2.5.0-4.7.4 - Filesystem Credentials Dialog CSRF
2017-05-16 00:00:00
cve
cve
CVE-2017-9064
2017-05-18 14:29:00
nvd
nvd
CVE-2017-9064
2017-05-18 14:29:00
debian
debian
[SECURITY] [DLA 975-1] wordpress security update
2017-06-02 12:47:52
[SECURITY] [DSA 3870-1] wordpress security update
2017-06-01 05:31:44
[SECURITY] [DSA 3870-1] wordpress security update
2017-06-01 05:31:44
nessus
nessus
WordPress 4.4.x < 4.4.10 Multiple Vulnerabilities
2018-11-05 00:00:00
WordPress 4.1.x < 4.1.18 Multiple Vulnerabilities
2018-11-05 00:00:00
WordPress < 4.7.5 Multiple Vulnerabilities
2017-05-19 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3870-1)
2017-05-31 00:00:00
WordPress < 4.7.5 Multiple Security Vulnerabilities - Linux
2017-05-22 00:00:00
Debian: Security Advisory (DLA-975-1)
2018-01-28 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.9%

JSON
Related for UB:CVE-2017-9064
osv3prion1cvelist1debiancve1wpvulndb1cve1nvd1debian3nessus14openvas5