Security Advisory

CVE-2010-4408

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-12-06 20:00:00

Last updated 2024-08-07 03:43:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.

← Browse all CVEs View on cve.org ↗