PT-2013-5742 · Trivantis · Coursemill Learning Management System

Published 2013-09-06 · Updated 2013-09-06 · CVE-2013-5708

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Coursemill Learning Management System (LMS) version 6.8

Description The issue allows remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies. This is due to the system constructing secret tokens based on time values.

Recommendations For version 6.8, consider implementing additional security measures to prevent CSRF attacks, such as utilizing a more secure token generation method that is not based on time values. As a temporary workaround, restrict access to sensitive operations that rely on these tokens to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-5708

Affected Products

Coursemill Learning Management System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-5708 · Security Note
• http://kb.cert.org/vuls/id/960908 · Note