PT-2018-11102 · Pivotal · Spring Batch Admin

Wen Bin Kong · Publicado 2018-03-21 · Atualizado 2019-10-09 · CVE-2018-1230

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pivotal Spring Batch Admin, all versions

Description The issue concerns the lack of cross-site request forgery protection. A remote unauthenticated user could craft a malicious site that executes requests to Spring Batch Admin. This has not been patched because Spring Batch Admin has reached end of life.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-1230

Produtos afetados

Spring Batch Admin

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-1230 · Nota de Segurança
• https://pivotal.io/security/cve-2018-1230 · Aviso do Fabricante
• http://securityfocus.com/bid/103463 · Nota