NVD

Id
30230  
Name
CVE-2014-1615  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijack the authentication of administrators for requests that add new administrative users and have other unspecified action, as demonstrated by a request to api/user.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-04-22  
Modified Date
2014-04-23  
Seq
2014-1615  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160059 30230 CVE-2014-1615 http://www.secureworks.com/advisories/SWRX-2014-007/SWRX-2014-007.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13343 JVNDB-2014-002218 Carbon Black におけるクロスサイトリクエストフォージェリの脆弱性 Carbon Black には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-1615 68902 CVE-2014-1615 30230 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002218.html 2014-04-01 2014-04-24 View