CVE-2009-1733

{"id": "CVE-2009-1733", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-05-20T19:30:00.217", "references": [{"url": "http://holisticinfosec.org/content/view/113/45/", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/54601", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34985", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50632", "source": "cve@mitre.org"}, {"url": "http://holisticinfosec.org/content/view/113/45/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/54601", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/34985", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50632", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en IPplan v4.91a permite a los atacantes remotos secuestrar la autenticaci\u00f3n del administraci\u00f3n, por peticiones que (1) cambian la contrase\u00f1a, (2)a\u00f1aden usuarios, o (3) borran usuarios a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:03:13.730", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:richard_ellerbrock:ipplan:4.91a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14228614-7FE5-402B-8A02-BB2AFD2996B6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}