PT-2011-4806 · Mailpack+4 · Mailpack+4

Publicado 2011-11-03 · Atualizado 2011-11-16 · CVE-2011-3994

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SKYARC MTCMS versions prior to 5.252 MultiFileUploader version 0.44 and earlier DuplicateEntry version 1.2 and earlier MailPack version 1.741 and earlier AutoTagging version 0.08 and earlier

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.

Recommendations For SKYARC MTCMS versions prior to 5.252, update to version 5.252 or later. For MultiFileUploader version 0.44 and earlier, update to a version later than 0.44. For DuplicateEntry version 1.2 and earlier, update to a version later than 1.2. For MailPack version 1.741 and earlier, update to a version later than 1.741. For AutoTagging version 0.08 and earlier, update to a version later than 0.08.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2011-3994

Produtos afetados

Autotagging

Duplicateentry

Mailpack

Multifileuploader

Skyarc Mtcms

Referências · 4

• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000094 · Nota
• http://mtcms.jp/news/product/201110131921.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3994 · Nota de Segurança
• http://jvn.jp/en/jp/JVN56667137/index.html · Nota