PT-2007-2738 · Tks Banking Solutions · Tks Banking Solutions Eportfolio

Published 2007-03-07 · Updated 2018-10-16 · CVE-2007-1332

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TKS Banking Solutions ePortfolio version 1.0

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to perform restricted actions within certain accounts by bypassing the client-side protection scheme.

Recommendations For TKS Banking Solutions ePortfolio version 1.0, consider implementing server-side checks to verify the origin of requests as a mitigation measure. Restrict access to sensitive actions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1332

Affected Products

Tks Banking Solutions Eportfolio

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-1332 · Security Note
• http://scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt · Vendor Advisory
• http://securityfocus.com/archive/1/461895/100/0/threaded · Note
• http://scip.ch/cgi-bin/smss/showadvf.pl?id=2893 · Note
• http://securityreason.com/securityalert/2385 · Note
• http://securityfocus.com/bid/22829 · Note
• http://secunia.com/advisories/24331 · Note