Beveiligingsadvies

CVE-2010-4408

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2010-12-06 20:00:00

Laatst bijgewerkt 2024-08-07 03:43:14

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.

← Alle CVE's bekijken Bekijk op cve.org ↗