NVD

Id
12857  
Name
CVE-2010-1325  
Description
Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-09-03  
Modified Date
2010-09-06  
Seq
2010-1325  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70884 12857 CVE-2010-1325 SUSE-SR:2010:014  View
70885 12857 CVE-2010-1325 http://support.novell.com/security/cve/CVE-2010-1325.html  View
70886 12857 CVE-2010-1325 42121  View
70887 12857 CVE-2010-1325 apacheslms-quoting-csrf(61006)  View
70888 12857 CVE-2010-1325 https://bugzilla.novell.com/show_bug.cgi?id=588284  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38873 JVNDB-2010-004658 SLE 上の SLMS におけるクロスサイトリクエストフォージェリの脆弱性 SUSE Linux Enterprise (SLE) 上で稼動する SUSE Lifecycle Management Server (SLMS) の apache2-slms パッケージは、適切でないパラメータの引用に関する不備があるため、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2010-1325 43905 CVE-2010-1325 12857 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004658.html 2010-08-02 2012-09-25 View