Lucene search
MitreCVE-2013-7107HistoryJan 15, 2014 - 4:08 p.m.
CVE-2013-7107
2014-01-1516:08:03
CWE-352
mitre
web.nvd.nist.gov
35
cve-2013-7107
csrf
icinga
cmd.cgi
remote attackers
user authentication
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.018
Percentile
88.0%
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
Affected configurations
Node
icingaicingaRange≤1.10.2
ORicingaicingaMatch0.8.0
ORicingaicingaMatch0.8.1
ORicingaicingaMatch0.8.2
ORicingaicingaMatch0.8.3
ORicingaicingaMatch0.8.4
ORicingaicingaMatch1.0
ORicingaicingaMatch1.0rc1
ORicingaicingaMatch1.0.1
ORicingaicingaMatch1.0.2
ORicingaicingaMatch1.0.3
ORicingaicingaMatch1.2.0
ORicingaicingaMatch1.2.1
ORicingaicingaMatch1.3.0
ORicingaicingaMatch1.3.1
ORicingaicingaMatch1.4.0
ORicingaicingaMatch1.4.1
ORicingaicingaMatch1.6.0
ORicingaicingaMatch1.6.1
ORicingaicingaMatch1.6.2
ORicingaicingaMatch1.7.0
ORicingaicingaMatch1.7.1
ORicingaicingaMatch1.7.2
ORicingaicingaMatch1.7.3
ORicingaicingaMatch1.7.4
ORicingaicingaMatch1.8.0
ORicingaicingaMatch1.8.1
ORicingaicingaMatch1.8.2
ORicingaicingaMatch1.8.3
ORicingaicingaMatch1.8.4
ORicingaicingaMatch1.8.5
ORicingaicingaMatch1.9.0
ORicingaicingaMatch1.9.1
ORicingaicingaMatch1.9.2
ORicingaicingaMatch1.9.3
ORicingaicingaMatch1.9.4
ORicingaicingaMatch1.10.0
ORicingaicingaMatch1.10.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| icinga | icinga | * | cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:* |
| icinga | icinga | 0.8.0 | cpe:2.3:a:icinga:icinga:0.8.0:*:*:*:*:*:*:* |
| icinga | icinga | 0.8.1 | cpe:2.3:a:icinga:icinga:0.8.1:*:*:*:*:*:*:* |
| icinga | icinga | 0.8.2 | cpe:2.3:a:icinga:icinga:0.8.2:*:*:*:*:*:*:* |
| icinga | icinga | 0.8.3 | cpe:2.3:a:icinga:icinga:0.8.3:*:*:*:*:*:*:* |
| icinga | icinga | 0.8.4 | cpe:2.3:a:icinga:icinga:0.8.4:*:*:*:*:*:*:* |
| icinga | icinga | 1.0 | cpe:2.3:a:icinga:icinga:1.0:*:*:*:*:*:*:* |
| icinga | icinga | 1.0 | cpe:2.3:a:icinga:icinga:1.0:rc1:*:*:*:*:*:* |
| icinga | icinga | 1.0.1 | cpe:2.3:a:icinga:icinga:1.0.1:*:*:*:*:*:*:* |
| icinga | icinga | 1.0.2 | cpe:2.3:a:icinga:icinga:1.0.2:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2013-7106
2014-01-15 16:08:03
cvelist
cvelist
CVE-2013-7106
2014-01-14 18:00:00
CVE-2013-7107
2014-01-14 18:00:00
ubuntucve
ubuntucve
CVE-2013-7106
2014-01-15 00:00:00
CVE-2013-7107
2014-01-15 00:00:00
nvd
nvd
CVE-2013-7106
2014-01-15 16:08:03
CVE-2013-7107
2014-01-15 16:08:03
prion
prion
Stack overflow
2014-01-15 16:08:00
Cross site request forgery (csrf)
2014-01-15 16:08:00
debiancve
debiancve
CVE-2013-7107
2014-01-15 16:08:03
CVE-2013-7106
2014-01-15 16:08:03
nessus
nessus
openSUSE Security Update : icinga (openSUSE-SU-2014:0269-1)
2014-06-13 00:00:00
Debian DSA-2956-1 : icinga - security update
2014-06-12 00:00:00
openvas
openvas
Debian Security Advisory DSA 2956-1 (icinga - security update)
2014-06-11 00:00:00
Debian: Security Advisory (DSA-2956-1)
2014-06-10 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2956-1] icinga security update
2014-06-14 00:00:00
debian
debian
[SECURITY] [DSA 2956-1] icinga security update
2014-06-11 14:34:20
osv
osv
icinga - security update
2014-06-11 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.018
Percentile
88.0%
Related for CVE-2013-7107