Lucene search
MitreCVE-2015-4460HistoryJul 16, 2015 - 8:59 p.m.
CVE-2015-4460
2015-07-1620:59:00
CWE-352
mitre
web.nvd.nist.gov
38
cve-2015-4460
cross-site request forgery
csrf vulnerability
b.a.s c2box
security vulnerability
nvd
authentication hijacking
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.007
Percentile
80.2%
Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors.
Affected configurations
Node
boxautomationc2boxRange≤4.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| boxautomation | c2box | * | cpe:2.3:a:boxautomation:c2box:*:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
C2Box 4.0.0(r19171) - Cross-Site Request Forgery
2015-06-30 00:00:00
exploitpack
exploitpack
C2Box 4.0.0(r19171) - Cross-Site Request Forgery
2015-06-30 00:00:00
prion
prion
Cross site request forgery (csrf)
2015-07-16 20:59:00
nvd
nvd
CVE-2015-4460
2015-07-16 20:59:00
securityvulns
securityvulns
CSRF Vulnerability in C2Box application CVE-2015-4460
2015-07-05 00:00:00
packetstorm
packetstorm
C2Box 4.0.0 r19171 Cross Site Request Forgery
2015-06-28 00:00:00
zdt
zdt
C2Box 4.0.0(r19171) - CSRF Vulnerability
2015-07-01 00:00:00
cvelist
cvelist
CVE-2015-4460
2015-07-16 20:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.007
Percentile
80.2%
Related for CVE-2015-4460