PT-2007-2738 · Tks Banking Solutions · Tks Banking Solutions Eportfolio

Publicado 2007-03-07 · Atualizado 2018-10-16 · CVE-2007-1332

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TKS Banking Solutions ePortfolio version 1.0

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to perform restricted actions within certain accounts by bypassing the client-side protection scheme.

Recommendations For TKS Banking Solutions ePortfolio version 1.0, consider implementing server-side checks to verify the origin of requests as a mitigation measure. Restrict access to sensitive actions to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1332

Produtos afetados

Tks Banking Solutions Eportfolio

Referências · 7

• http://securityfocus.com/archive/1/461895/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1332 · Nota de Segurança
• http://scip.ch/cgi-bin/smss/showadvf.pl?id=2893 · Nota
• http://securityreason.com/securityalert/2385 · Nota
• http://scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt · Aviso do Fabricante
• http://securityfocus.com/bid/22829 · Nota
• http://secunia.com/advisories/24331 · Nota