mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-29 05:56:17 +00:00
200 lines
7.1 KiB
JSON
200 lines
7.1 KiB
JSON
{
|
|
"id": "CVE-2008-7241",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2009-09-17T18:30:00.217",
|
|
"lastModified": "2009-09-18T04:00:00.000",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en PunBB anterior a v1.2.17, permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios sin especificar para peticiones relacionadas con el cierre de sesi\u00f3n. Probablemente relacionado con el cierre forzoso de sesi\u00f3n."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL",
|
|
"baseScore": 6.8
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-352"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.2.16",
|
|
"matchCriteriaId": "6BA5E143-287D-42EC-BF9B-5FED37D40C66"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A97DA335-4815-4608-84D5-67F4E539D8F0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9481F02E-2523-4599-A39D-3ACE518CEC35"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "01C976DD-47E4-48CA-AF99-93D0653D31F0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7277A122-5963-4E7F-BA1A-62B19AF804EB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DDBA41AF-C817-476A-8ED1-57808D0B678C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C353C194-328F-4C4C-9773-F06A0FA3978C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BFE58D68-FC34-4F70-849A-2E6CC919230D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5713E747-5529-4A64-95B4-D9678D8E88B3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1DFD4225-32F9-4D62-87C5-9632A1C03326"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4A75787B-6156-4710-9B24-48C5763E7771"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "20A9473E-DE15-4BE2-839D-90B55F8713EB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F4A94FF3-C732-4552-A32B-53C4739F7E52"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CDD30AB1-3E59-4981-9DFD-E7270D9C009E"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://osvdb.org/48685",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |