NVD

Id
7183  
Name
CVE-2011-0046  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to (1) adding a saved search in buglist.cgi, (2) voting in votes.cgi, (3) sanity checking in sanitycheck.cgi, (4) creating or editing a chart in chart.cgi, (5) column changing in colchange.cgi, and (6) adding, deleting, or approving a quip in quips.cgi.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-01-28  
Modified Date
2011-10-25  
Seq
2011-0046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40270 7183 CVE-2011-0046 FEDORA-2011-0741  View
40271 7183 CVE-2011-0046 FEDORA-2011-0755  View
40272 7183 CVE-2011-0046 http://www.bugzilla.org/security/3.2.9/  View
40273 7183 CVE-2011-0046 DSA-2322  View
40274 7183 CVE-2011-0046 45982  View
40275 7183 CVE-2011-0046 ADV-2011-0207  View
40276 7183 CVE-2011-0046 ADV-2011-0271  View
40277 7183 CVE-2011-0046 bugzilla-unspec-csrf(65003)  View
40278 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621090  View
40279 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621105  View
40280 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621107  View
40281 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621108  View
40282 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621109  View
40283 7183 CVE-2011-0046 https://bugzilla.mozilla.org/show_bug.cgi?id=621110  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33808 JVNDB-2011-004050 Bugzilla におけるクロスサイトリクエストフォージェリの脆弱性 Bugzillaには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-0046 47953 CVE-2011-0046 7183 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004050.html 2011-01-28 2012-03-27 View