Lucene search
HistorySep 03, 2015 - 5:59 p.m.
CVE-2015-6545
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.011
Percentile
84.8%
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Affected configurations
Node
webgroupmediacerbRange≤7.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| webgroupmedia | cerb | * | cpe:2.3:a:webgroupmedia:cerb:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Cross site request forgery (csrf)
2015-09-03 17:59:00
cvelist
cvelist
CVE-2015-6545
2015-09-03 17:00:00
packetstorm
packetstorm
Cerb 7.0.3 Cross Site Request Forgery
2015-09-02 00:00:00
htbridge
htbridge
Cross-Site Request Forgery in Cerb
2015-08-12 00:00:00
securityvulns
securityvulns
Cross-Site Request Forgery in Cerb
2015-10-26 00:00:00
cve
cve
CVE-2015-6545
2015-09-03 17:59:02
zdt
zdt
Cerb 7.0.3 Cross Site Request Forgery Vulnerability
2015-09-02 00:00:00
exploitpack
exploitpack
Cerb 7.0.3 - Cross-Site Request Forgery
2015-09-02 00:00:00
exploitdb
exploitdb
Cerb 7.0.3 - Cross-Site Request Forgery
2015-09-02 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.011
Percentile
84.8%
Related for NVD:CVE-2015-6545