CVE

Id
37149  
CVE No.
CVE-2008-7032  
Status
Candidate  
Description
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.  
Phase
Assigned (20090823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403540 37149 CVE-2008-7032 BUGTRAQ:20080210 F5 BIG-IP Web Management Console CSRF  View
403541 37149 CVE-2008-7032 URL:http://www.securityfocus.com/archive/1/archive/1/487862/100/200/threaded  View
403542 37149 CVE-2008-7032 BUGTRAQ:20080210 F5 BIG-IP Web Management Console CSRF (with example)  View
403543 37149 CVE-2008-7032 URL:http://www.securityfocus.com/archive/1/archive/1/487863/100/200/threaded  View
403544 37149 CVE-2008-7032 BID:27720  View
403545 37149 CVE-2008-7032 URL:http://www.securityfocus.com/bid/27720  View
403546 37149 CVE-2008-7032 OSVDB:50985  View
403547 37149 CVE-2008-7032 URL:http://osvdb.org/50985  View
403548 37149 CVE-2008-7032 XF:f5bigip-console-csrf(40419)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42098 JVNDB-2009-003105 bcoos の DevTracker のモジュールの index.php におけるクロスサイトスクリプティングの脆弱性 bcoos の DevTracker のモジュールおよび E-XooPS の DevTracker モジュールの index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-7036 37149 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003105.html  View