Lucene search
CertccCVE-2008-0182HistoryFeb 05, 2008 - 12:00 a.m.
CVE-2008-0182
2008-02-0500:00:00
CWE-352
certcc
web.nvd.nist.gov
29
cve-2008-0182
cross-site request forgery
csrf vulnerability
liferay portal
authenticated users
shutdown message
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
55.9%
Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.
Affected configurations
Node
liferayliferay_enterprise_portalRange≤4.3.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| liferay | liferay_enterprise_portal | * | cpe:2.3:a:liferay:liferay_enterprise_portal:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2008-0182
2008-02-05 00:00:00
cvelist
cvelist
CVE-2008-0182
2008-02-04 23:00:00
cert
cert
Liferay Portal fails to protect against CSRF
2008-01-31 00:00:00
prion
prion
Cross site request forgery (csrf)
2008-02-05 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
55.9%
Related for CVE-2008-0182