Lucene search
MitreCVE-2007-5259HistoryOct 06, 2007 - 5:17 p.m.
CVE-2007-5259
2007-10-0617:17:00
CWE-352
mitre
web.nvd.nist.gov
22
csrf
vulnerability
ilient sysaid
remote attackers
administrators
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.002
Percentile
58.1%
Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform some actions as administrators, as demonstrated by changing the administrator password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
ilientsysaidMatch4.5.03
ORilientsysaidMatch4.5.04
Related
prion
prion
Cross site request forgery (csrf)
2007-10-06 17:17:00
cvelist
cvelist
CVE-2007-5259
2007-10-06 17:00:00
nvd
nvd
CVE-2007-5259
2007-10-06 17:17:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.002
Percentile
58.1%
Related for CVE-2007-5259