NVD

Id
7603  
Name
CVE-2011-0545  
Description
Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-28  
Modified Date
2013-02-06  
Seq
2011-0545  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42933 7603 CVE-2011-0545 8160  View
42934 7603 CVE-2011-0545 1025242  View
42935 7603 CVE-2011-0545 http://sotiriu.de/adv/NSOADV-2011-001.txt  View
42936 7603 CVE-2011-0545 17026  View
42937 7603 CVE-2011-0545 20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability  View
42938 7603 CVE-2011-0545 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00  View
42939 7603 CVE-2011-0545 ADV-2011-0727  View
42940 7603 CVE-2011-0545 symantec-lua-gui-csrf(66213)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33933 JVNDB-2011-004175 Symantec LUA の adduser.do におけるクロスサイトリクエストフォージェリの脆弱性 Symantec LiveUpdate Administrator (LUA) の adduser.do には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-0545 48452 CVE-2011-0545 7603 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004175.html 2011-03-21 2012-03-27 View