2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2008-5400" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2008-12-10T06:44:41.830" ,
2023-11-07 21:03:21 +00:00
"lastModified" : "2023-11-07T02:03:07.083" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers."
} ,
{
"lang" : "es" ,
"value" : "M\u00faltiples vulnerabilidades de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSFR) en mvnForum anterior a v1.2.1 GA, permite a atacantes remotos (1) crear foros, (2) modificar los permisos sobre las cuentas, (3) activar cuentas o (4) desactivar cuentas como administrador a trav\u00e9s de vectores no especificados, posiblemente relacionado con las cabeceras HTTP Referers."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 6.8
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-352"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:*:ga:*:*:*:*:*:*" ,
"versionEndIncluding" : "1.2" ,
"matchCriteriaId" : "03DC374E-FC63-4F75-A506-9CBA0CC680AD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta1:*:*:*:*:*:*" ,
"matchCriteriaId" : "9C451367-C9A9-4D35-B873-DBF1884B405A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta2:*:*:*:*:*:*" ,
"matchCriteriaId" : "0F9B9221-C1EA-4C76-B9E5-A6D79AE5D7C7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:beta3:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD68AA01-B64F-4A9A-A542-807D58CD2389"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "66AFBB80-EA66-4C0B-93DB-6294733CD107"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA2751D2-7F4D-480F-B646-AF8DDB72BF6B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc3_01:*:*:*:*:*:*" ,
"matchCriteriaId" : "09B0F1B0-BFBA-4549-B140-3FAD86820369"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0:rc4:*:*:*:*:*:*" ,
"matchCriteriaId" : "008038D2-7B8E-43DF-95D7-FD425710DD78"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D2FF3125-8BCA-4E22-9539-1613E24AEA72"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "150FFB30-9CDF-428C-B846-6F3C4B7935C7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_beta3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AA97C851-1E4E-4055-96E6-689816EC0A1D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2B2FDF5C-373B-4F82-A7B1-1974E6E2DD9D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A39EBC4-9D83-42FE-8BB5-5E2581664DD4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc3_01:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2B43F991-B9E6-4D22-9EDE-F5C29984E99C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DFEA96C0-26D5-4F17-8BDB-7EA7F7E470B5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.0_rc4_04:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D0B00343-C685-4F40-866F-1424CBE89863"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0.2.:ga:*:*:*:*:*:*" ,
"matchCriteriaId" : "352C4C7D-13C8-4063-923D-8968ECD141EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0_ga:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DEDA805E-2B55-49B4-80E6-6A52DBB04D59"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.0_rc4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A8DD6FBA-DE95-4D53-8CB3-9676B6B6CDE1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mvnforum:mvnforum:1.1:ga:*:*:*:*:*:*" ,
"matchCriteriaId" : "7BD947A2-2FA1-443A-A213-47FF1C76A188"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0061.html" ,
"source" : "cve@mitre.org"
} ,
2023-11-07 21:03:21 +00:00
{
"url" : "http://osvdb.org/50404" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://secunia.com/advisories/32931" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://security.bkis.vn/?p=286" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://securityreason.com/securityalert/4699" ,
"source" : "cve@mitre.org"
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361" ,
"source" : "cve@mitre.org"
2023-04-24 12:24:31 +02:00
} ,
{
"url" : "http://www.securityfocus.com/archive/1/498872/100/0/threaded" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/47027" ,
"source" : "cve@mitre.org"
}
]
}
