PT-2010-3328 · Catalyst It · Mahara

Publicado 2010-07-06 · Atualizado 2017-08-17 · CVE-2010-1668

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.0.15 Mahara versions 1.1.x prior to 1.1.9 Mahara versions 1.2.x prior to 1.2.5

Description The issue allows remote attackers to hijack the authentication of victims via unknown vectors due to multiple cross-site request forgery (CSRF) vulnerabilities.

Recommendations For Mahara versions prior to 1.0.15, update to version 1.0.15 or later. For Mahara versions 1.1.x prior to 1.1.9, update to version 1.1.9 or later. For Mahara versions 1.2.x prior to 1.2.5, update to version 1.2.5 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2010-1668

DSA-2067-1

Produtos afetados

Mahara

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-1668 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59994 · Nota
• http://wiki.mahara.org/Release_Notes/1.2.5 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1668 · Nota
• http://securityfocus.com/bid/41319 · Nota
• http://secunia.com/advisories/40431 · Aviso do Fabricante
• http://wiki.mahara.org/Release_Notes/1.1.9 · Nota
• http://wiki.mahara.org/Release_Notes/1.0.15 · Nota