CVE-2016-7123

Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
gnumailman
𝑥
≤ 2.1.14
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mailman
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
Fixed 1:2.1.14-3ubuntu0.4
released
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92732
http://www.securitytracker.com/id/1037160
https://bugs.launchpad.net/bugs/1614841
http://www.securityfocus.com/bid/92732
http://www.securitytracker.com/id/1037160
https://bugs.launchpad.net/bugs/1614841