PT-2017-15164 · Knowledge · Knowledge

Published 2017-04-28 · Updated 2020-04-24 · CVE-2017-2097

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Knowledge versions prior to v1.7.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Recommendations For versions prior to v1.7.0, update to version v1.7.0 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2017-2097

Affected Products

Knowledge

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2097 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2097 · Vendor Advisory
• http://securityfocus.com/bid/95779 · Note
• http://jvn.jp/en/jp/JVN09460804/index.html · Note