Lucene search
RedhatCVE-2010-1648HistoryJun 08, 2010 - 12:30 a.m.
CVE-2010-1648
2010-06-0800:30:01
CWE-352
redhat
web.nvd.nist.gov
36
cve-2010-1648
cross-site request forgery
csrf vulnerability
mediawiki
authentication hijack
remote attackers
special:userlogin form
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form.
Affected configurations
Node
mediawikimediawikiMatch1.15.0
ORmediawikimediawikiMatch1.15.0rc1
ORmediawikimediawikiMatch1.15.1
ORmediawikimediawikiMatch1.15.2
ORmediawikimediawikiMatch1.15.3
ORmediawikimediawikiMatch1.16.0
ORmediawikimediawikiMatch1.16.0beta1
ORmediawikimediawikiMatch1.16.0beta2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mediawiki | mediawiki | 1.15.0 | cpe:2.3:a:mediawiki:mediawiki:1.15.0:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.0 | cpe:2.3:a:mediawiki:mediawiki:1.15.0:rc1:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.1 | cpe:2.3:a:mediawiki:mediawiki:1.15.1:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.2 | cpe:2.3:a:mediawiki:mediawiki:1.15.2:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.3 | cpe:2.3:a:mediawiki:mediawiki:1.15.3:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:beta1:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:beta2:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2010-06-08 00:30:00
debiancve
debiancve
CVE-2010-1648
2010-06-08 00:30:01
ubuntucve
ubuntucve
CVE-2010-1648
2010-06-08 00:00:00
nvd
nvd
CVE-2010-1648
2010-06-08 00:30:01
cvelist
cvelist
CVE-2010-1648
2010-06-07 20:00:00
openvas
openvas
Fedora Update for mediawiki FEDORA-2010-10848
2010-07-12 00:00:00
Fedora Update for mediawiki FEDORA-2010-10848
2010-07-12 00:00:00
Fedora Update for mediawiki FEDORA-2010-10779
2010-07-12 00:00:00
nessus
nessus
Fedora 13 : mediawiki-1.15.4-54.fc13 (2010-10779)
2010-07-07 00:00:00
Fedora 12 : mediawiki-1.15.4-54.fc12 (2010-10848)
2010-07-07 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: mediawiki-1.15.4-54.fc12
2010-07-06 17:35:17
[SECURITY] Fedora 13 Update: mediawiki-1.15.4-54.fc13
2010-07-06 17:24:05
[SECURITY] Fedora 13 Update: mediawiki-1.16.5-59.fc13
2011-05-20 20:58:01
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Related for CVE-2010-1648