NVD

Id
48740  
Name
CVE-2009-1464  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-14  
Modified Date
2010-05-11  
Seq
2009-1464  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246233 48740 CVE-2009-1464 1022204  View
246234 48740 CVE-2009-1464 20090512 Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities  View
246235 48740 CVE-2009-1464 34911  View
246236 48740 CVE-2009-1464 http://www.syhunt.com/advisories/?id=aas-multiple  View
246237 48740 CVE-2009-1464 http://www.syhunt.com/advisories/aashack.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43604 JVNDB-2009-004611 A-A-S の index.aas におけるクロスサイトリクエストフォージェリの脆弱性 Application Access Server (A-A-S) の index.aas には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-1464 38895 CVE-2009-1464 48740 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004611.html 2009-05-14 2012-09-25 View