Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0482
HistoryFeb 09, 2009 - 12:00 a.m.

CVE-2009-0482

2009-02-0900:00:00
ubuntu.com
ubuntu.com
8

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.002

Percentile

55.0%

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2
before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote
attackers to perform bug updating activities as other users via a link or
IMG tag to process_bug.cgi.

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.002

Percentile

55.0%