Vulnerabilites related to intersect_alliance - snare_epilog
Vulnerability from fkie_nvd
Published
2017-02-17 07:59
Modified
2024-11-21 03:28
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a "Web Admin Portal > Log Configuration > Add" action.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | http://arthrocyber.com/research | Exploit, Technical Description, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://arthrocyber.com/research | Exploit, Technical Description, Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| intersect_alliance | snare_epilog | 1.5.0 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.5.0:*:*:*:*:*:*:*", matchCriteriaId: "52003973-A127-4E33-899A-5533035CF445", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a \"Web Admin Portal > Log Configuration > Add\" action.", }, { lang: "es", value: "Vulnerabilidad de XSS en InterSect Alliance SNARE Epilog para UNIX versión 1.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro str_log_name en una acción \"Web Admin Portal > Log Configuration > Add\".", }, ], id: "CVE-2017-5998", lastModified: "2024-11-21T03:28:52.010", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "LOW", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 3.5, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:S/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 6.8, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: true, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2017-02-17T07:59:00.933", references: [ { source: "cve@mitre.org", tags: [ "Exploit", "Technical Description", "Third Party Advisory", ], url: "http://arthrocyber.com/research", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Technical Description", "Third Party Advisory", ], url: "http://arthrocyber.com/research", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2010-07-02 12:43
Modified
2024-11-21 01:16
Severity ?
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | http://holisticinfosec.org/content/view/144/45/ | Third Party Advisory | |
| cve@mitre.org | http://secunia.com/advisories/39562 | Broken Link | |
| cve@mitre.org | http://www.kb.cert.org/vuls/id/173009 | Third Party Advisory, US Government Resource | |
| cve@mitre.org | http://www.securityfocus.com/bid/41226 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://holisticinfosec.org/content/view/144/45/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/39562 | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.kb.cert.org/vuls/id/173009 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/41226 | Third Party Advisory, VDB Entry |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "89C72256-1076-4ADE-99FD-3211D4210571", versionEndIncluding: "3.2.3", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.0:*:*:*:*:*:*:*", matchCriteriaId: "52F1E105-8DD0-4A70-B776-118C0AD297CD", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.1:*:*:*:*:*:*:*", matchCriteriaId: "90D62C11-8F19-4EA2-B69A-4AD59A285DC6", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.3:*:*:*:*:*:*:*", matchCriteriaId: "9C12A8C4-BF04-4B1B-8B50-EF6E9BDB14F2", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.4:*:*:*:*:*:*:*", matchCriteriaId: "08EE9563-7416-4572-9B73-8D67F82DD2BC", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5:*:*:*:*:*:*:*", matchCriteriaId: "36F767D0-6ACB-40AC-8260-0F43E1CB7332", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5.2:*:*:*:*:*:*:*", matchCriteriaId: "A2432243-5B6A-49B7-A18D-BF902872880B", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5.3:*:*:*:*:*:*:*", matchCriteriaId: "776ADA38-8323-44FC-BB85-823BB31E0FE7", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5.4:*:*:*:*:*:*:*", matchCriteriaId: "0C74F35D-5B2B-413B-8297-4F8EA65A0CC8", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5.6:*:*:*:*:*:*:*", matchCriteriaId: "DDF910EF-2A69-4B43-B487-EF476412BFF7", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:2.5.7:*:*:*:*:*:*:*", matchCriteriaId: "316DADD7-21E6-4729-AE75-87DD21977E1E", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.0.0:*:*:*:*:*:*:*", matchCriteriaId: "23ED0D79-6929-4E77-96EB-3A4DA40E3E2A", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.0:*:*:*:*:*:*:*", matchCriteriaId: "55318889-CE1E-4C38-BC61-7A31F4C4502C", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.2.0:*:*:*:*:*:*:*", matchCriteriaId: "2B22AFA6-E731-49E4-91B7-8659B156D63A", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.2.1:*:*:*:*:*:*:*", matchCriteriaId: "526D1EBD-BBFA-42C7-96D6-5B24E447D6C5", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.2.2:*:*:*:*:*:*:*", matchCriteriaId: "5C0B63D1-6D64-4640-A0DA-4A0603456057", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*", matchCriteriaId: "469B74F2-4B89-42B8-8638-731E92D463B9", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "E64BBC83-2C9E-4B35-ACF5-E4A0DD4CACB9", versionEndIncluding: "3.1.7", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.0.0:*:*:*:*:*:*:*", matchCriteriaId: "23ED0D79-6929-4E77-96EB-3A4DA40E3E2A", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.0:*:*:*:*:*:*:*", matchCriteriaId: "55318889-CE1E-4C38-BC61-7A31F4C4502C", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.2:*:*:*:*:*:*:*", matchCriteriaId: "CE0B343C-3313-480E-AD50-8844C5EE3107", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.3:*:*:*:*:*:*:*", matchCriteriaId: "78246ED3-92E1-4036-B46E-391F398FD05D", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.4:*:*:*:*:*:*:*", matchCriteriaId: "307FF903-7722-4AE3-B36B-5ED492A0115E", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.5:*:*:*:*:*:*:*", matchCriteriaId: "AB68669D-D718-482A-BA8D-8231E9AA6D50", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:3.1.6:*:*:*:*:*:*:*", matchCriteriaId: "29DC5182-860C-4D2D-8427-E00A3D0B05F3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", matchCriteriaId: "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*", matchCriteriaId: "60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*", matchCriteriaId: "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "0259B24D-3DB9-4A77-BF45-E392A548F4E9", versionEndIncluding: "1.5.0", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:0.9.2:*:*:*:*:*:*:*", matchCriteriaId: "D25BE641-7C32-4A45-9B3A-8517923B72ED", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:0.9.6:*:*:*:*:*:*:*", matchCriteriaId: "86A81EDD-98C2-41FA-B3ED-E846E4E287D0", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:0.9.7:*:*:*:*:*:*:*", matchCriteriaId: "ADE10B2C-41B5-47D3-AE56-874198DFE8EF", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:0.9.7a:*:*:*:*:*:*:*", matchCriteriaId: "FC197C77-DD26-43B2-9147-90B476E45891", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:0.9.8:*:*:*:*:*:*:*", matchCriteriaId: "94641156-1C85-42AB-B201-CE81432274BF", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.0:*:*:*:*:*:*:*", matchCriteriaId: "B9D6CCDA-376C-402B-AC90-5578374B5461", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.1:*:*:*:*:*:*:*", matchCriteriaId: "43FC0A2E-F5F4-4334-8D76-AC097F7BA29B", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.2:*:*:*:*:*:*:*", matchCriteriaId: "A301F579-FC14-4FF0-8383-A0E12B2D461F", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.3:*:*:*:*:*:*:*", matchCriteriaId: "2B093131-CABA-4B30-8A2F-E11F3E3D3E51", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.4:*:*:*:*:*:*:*", matchCriteriaId: "673EE9E4-8465-4659-B65E-5215B09732B8", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.4.1:*:*:*:*:*:*:*", matchCriteriaId: "0AB364B9-E2DB-4FEF-B53F-D3F014B48BDD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", matchCriteriaId: "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "2A0A0446-6190-44B7-BE90-1B07A3A650D9", versionEndIncluding: "1.4", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.0:*:*:*:*:*:*:*", matchCriteriaId: "B9D6CCDA-376C-402B-AC90-5578374B5461", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.2:*:*:*:*:*:*:*", matchCriteriaId: "A301F579-FC14-4FF0-8383-A0E12B2D461F", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.3:*:*:*:*:*:*:*", matchCriteriaId: "2B093131-CABA-4B30-8A2F-E11F3E3D3E51", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*", matchCriteriaId: "056B3397-81A9-4128-9F49-ECEBE1743EE8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:*:*:*:*:*:*:*:*", matchCriteriaId: "DDBAE0DE-4F29-45D5-9B9E-8C9D4D02BD31", versionEndIncluding: "1.5.3", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.1:*:*:*:*:*:*:*", matchCriteriaId: "49A8709F-5400-4946-B08E-7FF0812DB679", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.2:*:*:*:*:*:*:*", matchCriteriaId: "8D1BF5FF-6148-49E1-B58B-E46EA24F7953", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.3:*:*:*:*:*:*:*", matchCriteriaId: "883D033D-F5D4-4FFD-85F8-CE4054470362", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.3.1:*:*:*:*:*:*:*", matchCriteriaId: "B7231A15-25B7-4D09-B19E-676B2A8F98D0", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.3.3:*:*:*:*:*:*:*", matchCriteriaId: "CBE17A5C-4ED8-4E9A-8E41-730F70D709E9", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.4.0:*:*:*:*:*:*:*", matchCriteriaId: "9552E0E7-6E7D-4807-9D9E-AF4956C47C61", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.5.0:*:*:*:*:*:*:*", matchCriteriaId: "52003973-A127-4E33-899A-5533035CF445", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.5.1:*:*:*:*:*:*:*", matchCriteriaId: "C3F842B9-11DE-44DB-B49D-9927E28FE571", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.5.2:*:*:*:*:*:*:*", matchCriteriaId: "3749470D-5AFD-4391-9CBD-B346CDF76B15", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", matchCriteriaId: "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:*:*:*:*:*:*:*:*", matchCriteriaId: "2D371D01-1212-43AD-807A-871FDBC64C9E", versionEndIncluding: "1.2", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_epilog:1.1:*:*:*:*:*:*:*", matchCriteriaId: "49A8709F-5400-4946-B08E-7FF0812DB679", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*", matchCriteriaId: "F7A7C398-5356-45D6-AA5C-53E63BC88DCA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "0259B24D-3DB9-4A77-BF45-E392A548F4E9", versionEndIncluding: "1.5.0", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.0:*:*:*:*:*:*:*", matchCriteriaId: "B9D6CCDA-376C-402B-AC90-5578374B5461", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.2:*:*:*:*:*:*:*", matchCriteriaId: "A301F579-FC14-4FF0-8383-A0E12B2D461F", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.3:*:*:*:*:*:*:*", matchCriteriaId: "2B093131-CABA-4B30-8A2F-E11F3E3D3E51", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.4:*:*:*:*:*:*:*", matchCriteriaId: "673EE9E4-8465-4659-B65E-5215B09732B8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", matchCriteriaId: "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:*:*:*:*:*:*:*:*", matchCriteriaId: "BFC2625D-4978-4D3E-930F-7A4E1AE97832", versionEndIncluding: "1.1.4", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.0:*:*:*:*:*:*:*", matchCriteriaId: "B9D6CCDA-376C-402B-AC90-5578374B5461", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "C3104865-CA72-4EA6-B12F-C1866B838C74", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.1.0:*:*:*:*:*:*:*", matchCriteriaId: "F7BA01B6-7ABB-4A61-8349-CDF81B38016C", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.1.1:*:*:*:*:*:*:*", matchCriteriaId: "6D9262BE-6BD7-48D5-BE9E-66404F6B4C02", vulnerable: true, }, { criteria: "cpe:2.3:a:intersect_alliance:snare_agent:1.1.2:*:*:*:*:*:*:*", matchCriteriaId: "4BC22219-2F56-4562-B409-1F504A734064", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*", matchCriteriaId: "D56B932B-9593-44E2-B610-E4EB2143EB21", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*", matchCriteriaId: "32623D48-7000-4C7D-823F-7D2A9841D88C", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", matchCriteriaId: "3852BB02-47A1-40B3-8E32-8D8891A53114", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.", }, { lang: "es", value: "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en la interfaz de gestión Web de InterSect Alliance Snare Agent v3.2.3 y anteriores en Solaris, Snare Agent v3.1.7 y anteriores en Windows, Snare Agent v1.5.0 y anteriores en Linux y AIX, Snare Agent v1.4 y anteriores en IRIX, Snare Epilog v1.5.3 y anteriores en Windows, y Snare Epilog v1.2 y anteriores en UNIX permiten a atacantes remotos secuestrar la autenticación de los administradores para solicitudes que (1) modifiquen la contraseña o (2) cambien el puerto de escucha.", }, ], id: "CVE-2010-2594", lastModified: "2024-11-21T01:16:57.990", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: true, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: true, }, ], }, published: "2010-07-02T12:43:52.970", references: [ { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "http://holisticinfosec.org/content/view/144/45/", }, { source: "cve@mitre.org", tags: [ "Broken Link", ], url: "http://secunia.com/advisories/39562", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/173009", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/41226", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://holisticinfosec.org/content/view/144/45/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Broken Link", ], url: "http://secunia.com/advisories/39562", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/173009", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/41226", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-352", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
cve-2017-5998
Vulnerability from cvelistv5
Published
2017-02-17 07:45
Modified
2024-08-05 15:18
Severity ?
EPSS score ?
Summary
Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a "Web Admin Portal > Log Configuration > Add" action.
References
| ▼ | URL | Tags |
|---|---|---|
| http://arthrocyber.com/research | x_refsource_MISC |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T15:18:49.514Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://arthrocyber.com/research", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2017-02-17T00:00:00", descriptions: [ { lang: "en", value: "Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a \"Web Admin Portal > Log Configuration > Add\" action.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-02-17T07:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "http://arthrocyber.com/research", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-5998", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a \"Web Admin Portal > Log Configuration > Add\" action.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://arthrocyber.com/research", refsource: "MISC", url: "http://arthrocyber.com/research", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2017-5998", datePublished: "2017-02-17T07:45:00", dateReserved: "2017-02-15T00:00:00", dateUpdated: "2024-08-05T15:18:49.514Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2010-2594
Vulnerability from cvelistv5
Published
2010-07-01 18:00
Modified
2024-09-16 22:02
Severity ?
EPSS score ?
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.
References
| ▼ | URL | Tags |
|---|---|---|
| http://holisticinfosec.org/content/view/144/45/ | x_refsource_MISC | |
| http://www.securityfocus.com/bid/41226 | vdb-entry, x_refsource_BID | |
| http://secunia.com/advisories/39562 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.kb.cert.org/vuls/id/173009 | third-party-advisory, x_refsource_CERT-VN |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T02:39:36.577Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://holisticinfosec.org/content/view/144/45/", }, { name: "41226", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/41226", }, { name: "39562", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/39562", }, { name: "VU#173009", tags: [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred", ], url: "http://www.kb.cert.org/vuls/id/173009", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2010-07-01T18:00:00Z", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "http://holisticinfosec.org/content/view/144/45/", }, { name: "41226", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/41226", }, { name: "39562", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/39562", }, { name: "VU#173009", tags: [ "third-party-advisory", "x_refsource_CERT-VN", ], url: "http://www.kb.cert.org/vuls/id/173009", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2010-2594", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://holisticinfosec.org/content/view/144/45/", refsource: "MISC", url: "http://holisticinfosec.org/content/view/144/45/", }, { name: "41226", refsource: "BID", url: "http://www.securityfocus.com/bid/41226", }, { name: "39562", refsource: "SECUNIA", url: "http://secunia.com/advisories/39562", }, { name: "VU#173009", refsource: "CERT-VN", url: "http://www.kb.cert.org/vuls/id/173009", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2010-2594", datePublished: "2010-07-01T18:00:00Z", dateReserved: "2010-07-01T00:00:00Z", dateUpdated: "2024-09-16T22:02:22.454Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }