NVD

Id
14830  
Name
CVE-2010-3449  
Description
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-06  
Modified Date
2011-03-07  
Seq
2010-3449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82165 14830 CVE-2010-3449 http://archiva.apache.org/security.html  View
82166 14830 CVE-2010-3449 http://continuum.apache.org/security.html  View
82167 14830 CVE-2010-3449 http://jira.codehaus.org/browse/MRM-1438  View
82168 14830 CVE-2010-3449 [archiva-users] 20101129 Apache Archiva CSRF Vulnerability  View
82169 14830 CVE-2010-3449 [continuum-users] 20110210 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability  View
82170 14830 CVE-2010-3449 20110211 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability  View
82171 14830 CVE-2010-3449 http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml?r1=1038518&r2=1038517&pathrev=1038518  View
82172 14830 CVE-2010-3449 http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/pom.xml?r1=1038518&r2=1038517&pathrev=1038518  View
82173 14830 CVE-2010-3449 http://svn.apache.org/viewvc?view=revision&revision=1038518  View
82174 14830 CVE-2010-3449 http://svn.apache.org/viewvc?view=revision&revision=1066010  View
82175 14830 CVE-2010-3449 20101129 [CVE-2010-3449] Apache Archiva CSRF Vulnerability  View
82176 14830 CVE-2010-3449 20110210 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability  View
82177 14830 CVE-2010-3449 45095  View
82178 14830 CVE-2010-3449 1025066  View
82179 14830 CVE-2010-3449 ADV-2010-3098  View
82180 14830 CVE-2010-3449 ADV-2011-0373  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37065 JVNDB-2010-002845 Apache Archiva および Apache Continuum におけるクロスサイトリクエストフォージェリの脆弱性 Apache Archiva および Apache Continuum には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2010-3449 46029 CVE-2010-3449 14830 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002845.html 2010-11-24 2011-06-10 View