NVD

Id
47175  
Name
CVE-2012-6493  
Description
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-02-04  
Modified Date
2014-02-24  
Seq
2012-6493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236046 47175 CVE-2012-6493 20130103 CVE-2012-6493 - Nexpose Security Console - Cross-Site Request Forgery (CSRF)  View
236047 47175 CVE-2012-6493 http://packetstormsecurity.com/files/119260/Nexpose-Security-Console-Cross-Site-Request-Forgery.html  View
236048 47175 CVE-2012-6493 23924  View
236049 47175 CVE-2012-6493 https://community.rapid7.com/docs/DOC-2155#release1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30426 JVNDB-2012-006134 Rapid7 Nexpose のセキュリティコンソールにおけるクロスサイトリクエストフォージェリの脆弱性 Rapid7 Nexpose のセキュリティコンソールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-6493 59731 CVE-2012-6493 47175 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006134.html 2012-12-19 2014-02-06 View