CVE-2016-7123

EUVD-2016-8001
Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
gnumailman
𝑥
≤ 2.1.14
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mailman
precise
Fixed 1:2.1.14-3ubuntu0.4
released
trusty
dne
xenial
not-affected
yakkety
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92732
http://www.securitytracker.com/id/1037160
https://bugs.launchpad.net/bugs/1614841
http://www.securityfocus.com/bid/92732
http://www.securitytracker.com/id/1037160
https://bugs.launchpad.net/bugs/1614841