NVD

Id
45821  
Name
CVE-2012-4431  
Description
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-12-19  
Modified Date
2016-12-07  
Seq
2012-4431  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230009 45821 CVE-2012-4431 20121204 CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter  View
230010 45821 CVE-2012-4431 openSUSE-SU-2012:1700  View
230011 45821 CVE-2012-4431 openSUSE-SU-2012:1701  View
230012 45821 CVE-2012-4431 openSUSE-SU-2013:0147  View
230013 45821 CVE-2012-4431 openSUSE-SU-2013:0161  View
230014 45821 CVE-2012-4431 openSUSE-SU-2013:0192  View
230015 45821 CVE-2012-4431 SSRT101139  View
230016 45821 CVE-2012-4431 HPSBST02955  View
230017 45821 CVE-2012-4431 oval:org.mitre.oval:def:18541  View
230018 45821 CVE-2012-4431 RHSA-2013:0267  View
230019 45821 CVE-2012-4431 RHSA-2013:0268  View
230020 45821 CVE-2012-4431 RHSA-2013:0647  View
230021 45821 CVE-2012-4431 RHSA-2013:0648  View
230022 45821 CVE-2012-4431 RHSA-2013:1437  View
230023 45821 CVE-2012-4431 RHSA-2013:1853  View
230024 45821 CVE-2012-4431 http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/filters/CsrfPreventionFilter.java?r1=1393088&r2=1393087&pathrev=1393088  View
230025 45821 CVE-2012-4431 http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1393088&r2=1393087&pathrev=1393088  View
230026 45821 CVE-2012-4431 http://svn.apache.org/viewvc?view=revision&revision=1393088  View
230027 45821 CVE-2012-4431 http://tomcat.apache.org/security-6.html  View
230028 45821 CVE-2012-4431 http://tomcat.apache.org/security-7.html  View
230029 45821 CVE-2012-4431 56814  View
230030 45821 CVE-2012-4431 1027834  View
230031 45821 CVE-2012-4431 USN-1685-1  View
230032 45821 CVE-2012-4431 HPSBMU02873  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30043 JVNDB-2012-005750 Apache Tomcat におけるクロスサイトリクエストフォージェリ (CSRF) 保護メカニズムを回避される脆弱性 Apache Tomcat の org/apache/catalina/filters/CsrfPreventionFilter.java には、クロスサイトリクエストフォージェリ (CSRF) 保護メカニズムを回避される脆弱性が存在します。 CVE-2012-4431 57669 CVE-2012-4431 45821 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005750.html 2012-12-04 2015-03-09 View