NVD

Id
8790  
Name
CVE-2011-1911  
Description
JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable _flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a brute-force approach.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-09-20  
Modified Date
2012-05-31  
Seq
2011-1911  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50653 8790 CVE-2011-1911 http://www.csirtcv.gva.es/es/alertas/vulnerabilidad-en-jasperserver.html  View
50654 8790 CVE-2011-1911 http://www.csirtcv.gva.es/sites/all/files/images/content/%5BCSIRT-cv%5D%20JasperServer%203.7.0%20CE%20CSRF%20Advisory.pdf  View
50655 8790 CVE-2011-1911 VU#519588  View
50656 8790 CVE-2011-1911 http://www.kb.cert.org/vuls/id/MAPG-8ELLJC  View
50657 8790 CVE-2011-1911 49649  View
50658 8790 CVE-2011-1911 jasperreports-flowexecutionkey-csrf(69849)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31989 JVNDB-2011-002229 JasperServer にクロスサイトリクエストフォージェリの脆弱性 JasperServer には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-1911 49818 CVE-2011-1911 8790 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002229.html 2011-09-16 2011-09-22 View