Lucene search

[email protected]CVE-2010-2594

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2594

2022-10-0316:21:09

CWE-352

[email protected]

web.nvd.nist.gov

cve-2010-2594

csrf vulnerabilities

intersect alliance snare agent

authentication hijacking

security vulnerabilities

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.

Affected configurations

NVD

Node

intersect_alliancesnare_agentRange≤3.2.3

intersect_alliancesnare_agentMatch2.0

intersect_alliancesnare_agentMatch2.1

intersect_alliancesnare_agentMatch2.3

intersect_alliancesnare_agentMatch2.4

intersect_alliancesnare_agentMatch2.5

intersect_alliancesnare_agentMatch2.5.2

intersect_alliancesnare_agentMatch2.5.3

intersect_alliancesnare_agentMatch2.5.4

intersect_alliancesnare_agentMatch2.5.6

intersect_alliancesnare_agentMatch2.5.7

intersect_alliancesnare_agentMatch3.0.0

intersect_alliancesnare_agentMatch3.1.0

intersect_alliancesnare_agentMatch3.2.0

intersect_alliancesnare_agentMatch3.2.1

intersect_alliancesnare_agentMatch3.2.2

AND

sunsolaris

Node

intersect_alliancesnare_agentRange≤3.1.7

intersect_alliancesnare_agentMatch3.0.0

intersect_alliancesnare_agentMatch3.1.0

intersect_alliancesnare_agentMatch3.1.2

intersect_alliancesnare_agentMatch3.1.3

intersect_alliancesnare_agentMatch3.1.4

intersect_alliancesnare_agentMatch3.1.5

intersect_alliancesnare_agentMatch3.1.6

AND

microsoftwindows_2000

microsoftwindows_2003_server

microsoftwindows_xp

Node

intersect_alliancesnare_agentRange≤1.5.0

intersect_alliancesnare_agentMatch0.9.2

intersect_alliancesnare_agentMatch0.9.6

intersect_alliancesnare_agentMatch0.9.7

intersect_alliancesnare_agentMatch0.9.7a

intersect_alliancesnare_agentMatch0.9.8

intersect_alliancesnare_agentMatch1.0

intersect_alliancesnare_agentMatch1.1

intersect_alliancesnare_agentMatch1.2

intersect_alliancesnare_agentMatch1.3

intersect_alliancesnare_agentMatch1.4

intersect_alliancesnare_agentMatch1.4.1

AND

linuxlinux_kernelMatch-

Node

intersect_alliancesnare_agentRange≤1.4

intersect_alliancesnare_agentMatch1.0

intersect_alliancesnare_agentMatch1.2

intersect_alliancesnare_agentMatch1.3

AND

sgiirix

Node

intersect_alliancesnare_epilogRange≤1.5.3

intersect_alliancesnare_epilogMatch1.1

intersect_alliancesnare_epilogMatch1.2

intersect_alliancesnare_epilogMatch1.3

intersect_alliancesnare_epilogMatch1.3.1

intersect_alliancesnare_epilogMatch1.3.3

intersect_alliancesnare_epilogMatch1.4.0

intersect_alliancesnare_epilogMatch1.5.0

intersect_alliancesnare_epilogMatch1.5.1

intersect_alliancesnare_epilogMatch1.5.2

AND

microsoftwindows

Node

intersect_alliancesnare_epilogRange≤1.2

intersect_alliancesnare_epilogMatch1.1

AND

unixunix

Node

intersect_alliancesnare_agentRange≤1.5.0

intersect_alliancesnare_agentMatch1.0

intersect_alliancesnare_agentMatch1.2

intersect_alliancesnare_agentMatch1.3

intersect_alliancesnare_agentMatch1.4

AND

ibmaix

Node

intersect_alliancesnare_agentRange≤1.1.4

intersect_alliancesnare_agentMatch1.0

intersect_alliancesnare_agentMatch1.0.1

intersect_alliancesnare_agentMatch1.1.0

intersect_alliancesnare_agentMatch1.1.1

intersect_alliancesnare_agentMatch1.1.2

AND

microsoftwindows_7

microsoftwindows_server_2008Match-

microsoftwindows_vista

CPENameOperatorVersion
intersect_alliance:snare_agentintersect alliance snare agentle3.2.3
intersect_alliance:snare_agentintersect alliance snare agenteq2.0
intersect_alliance:snare_agentintersect alliance snare agenteq2.1
intersect_alliance:snare_agentintersect alliance snare agenteq2.3
intersect_alliance:snare_agentintersect alliance snare agenteq2.4
intersect_alliance:snare_agentintersect alliance snare agenteq2.5
intersect_alliance:snare_agentintersect alliance snare agenteq2.5.2
intersect_alliance:snare_agentintersect alliance snare agenteq2.5.3
intersect_alliance:snare_agentintersect alliance snare agenteq2.5.4
intersect_alliance:snare_agentintersect alliance snare agenteq2.5.6

CPE	Name	Operator	Version
intersect_alliance:snare_agent	intersect alliance snare agent	le	3.2.3
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.0
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.1
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.3
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.4
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.5
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.5.2
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.5.3
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.5.4
intersect_alliance:snare_agent	intersect alliance snare agent	eq	2.5.6

Rows per page:

1-10 of 161

References

holisticinfosec.org/content/view/144/45/

secunia.com/advisories/39562

www.kb.cert.org/vuls/id/173009

www.securityfocus.com/bid/41226

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.1%

JSON

Related for CVE-2010-2594

prion1 kaspersky1 nvd1 cvelist1