Vulnerability CVE-2012-4943
Published: 2012-11-18   Modified: 2012-11-19

Description:
Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to hijack the authentication of arbitrary users for requests that modify (1) passwords, (2) accounts, or (3) permissions.

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Agilefleet -> Fleetcommander 
Agilefleet -> Fleetcommander kiosk 

 References:
http://www.kb.cert.org/vuls/id/427547
http://xforce.iss.net/xforce/xfdb/79854
Copyright 2024, cxsecurity.com

 

Back to Top