CVE-2012-4943

{"id": "CVE-2012-4943", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-11-18T21:55:01.010", "references": [{"url": "http://www.kb.cert.org/vuls/id/427547", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/56427", "source": "cret@cert.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79854", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/427547", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/56427", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79854", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to hijack the authentication of arbitrary users for requests that modify (1) passwords, (2) accounts, or (3) permissions."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de falsificaci\u00f3n de peticiones en sitios cruzados (CSRF) en Agile FleetCommander y Kiosk FleetCommander antes de v4.08 permiten a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios para peticiones de su elecci\u00f3n que modifican (1) las contrase\u00f1as, (2) las cuentas, o (3) permisos."}], "lastModified": "2024-11-21T01:43:47.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:agilefleet:fleetcommander:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FC0EB44-CDFB-48E4-B99A-EEB5C81912CC", "versionEndIncluding": "4.0"}, {"criteria": "cpe:2.3:a:agilefleet:fleetcommander_kiosk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E90E2FAC-A08B-49B0-85F9-9766857F0B6E", "versionEndIncluding": "4.0"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}