PT-2010-4824 · Apache+1 · Apache Continuum+2
Publicado
2010-12-06
·
Atualizado
2018-10-10
·
CVE-2010-3449
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Redback versions prior to 1.2.4
Apache Archiva versions 1.0 through 1.0.3
Apache Archiva versions 1.1 through 1.1.4
Apache Archiva versions 1.2 through 1.2.2
Apache Archiva versions 1.3 through 1.3.1
Apache Continuum version 1.3.6
Apache Continuum version 1.4.0
Apache Continuum versions 1.1 through 1.2.3.1
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that modify credentials. This can lead to unauthorized changes to credentials.
Recommendations
For Redback versions prior to 1.2.4, update to version 1.2.4 or later.
For Apache Archiva versions 1.0 through 1.0.3, update to a version outside of this range.
For Apache Archiva versions 1.1 through 1.1.4, update to a version outside of this range.
For Apache Archiva versions 1.2 through 1.2.2, update to a version outside of this range.
For Apache Archiva versions 1.3 through 1.3.1, update to a version outside of this range.
For Apache Continuum version 1.3.6, update to a version outside of this range.
For Apache Continuum version 1.4.0, update to a version outside of this range.
For Apache Continuum versions 1.1 through 1.2.3.1, update to a version outside of this range.
Exploit
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Archiva
Apache Continuum
Redback