CVE-2012-3532

EUVD-2012-3483
Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
redhatjboss_enterprise_portal_platform
𝑥
≤ 5.2.2
redhatjboss_enterprise_portal_platform
4.3.0
redhatjboss_enterprise_portal_platform
5.0.0
redhatjboss_enterprise_portal_platform
5.0.1
redhatjboss_enterprise_portal_platform
5.1.0
redhatjboss_enterprise_portal_platform
5.1.1
redhatjboss_enterprise_portal_platform
5.2.0
redhatjboss_enterprise_portal_platform
5.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2013-0733.html
http://secunia.com/advisories/53005
http://www.securityfocus.com/bid/59015
https://bugzilla.redhat.com/show_bug.cgi?id=851046
http://rhn.redhat.com/errata/RHSA-2013-0733.html
http://secunia.com/advisories/53005
http://www.securityfocus.com/bid/59015
https://bugzilla.redhat.com/show_bug.cgi?id=851046