Lucene search
MitreCVE-2015-3624HistoryJun 09, 2015 - 2:59 p.m.
CVE-2015-3624
2015-06-0914:59:03
CWE-352
mitre
web.nvd.nist.gov
46
cve-2015-3624
cross-site request forgery
csrf vulnerability
ektron cms
content deletion
security vulnerability
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.4%
Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.120) allows remote attackers to hijack the authentication of content administrators for requests that delete content via a delete action.
Affected configurations
Node
ektronektron_content_management_systemRange≤9.1sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ektron | ektron_content_management_system | * | cpe:2.3:a:ektron:ektron_content_management_system:*:sp1:*:*:*:*:*:* |
References
Related
packetstorm
packetstorm
Ektron CMS 9.10 SP1 Cross Site Request Forgery
2015-05-31 00:00:00
exploitdb
exploitdb
Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery
2015-06-16 00:00:00
nvd
nvd
CVE-2015-3624
2015-06-09 14:59:03
cvelist
cvelist
CVE-2015-3624
2015-06-09 14:00:00
exploitpack
exploitpack
Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery
2015-06-16 00:00:00
zdt
zdt
Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - CSRF Vulnerability
2015-06-16 00:00:00
prion
prion
Cross site request forgery (csrf)
2015-06-09 14:59:00
securityvulns
securityvulns
Ektron CMS 9.10 SP1 - CSRF Vulnerability
2015-06-08 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.012
Percentile
85.4%
Related for CVE-2015-3624