First published: Thu Jun 03 2010(Updated: )
Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify "facility reservation data" via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Fujitsu e-Pares | =l01 | |
Fujitsu e-Pares | =l30 | |
Fujitsu e-Pares | =v01 | |
Fujitsu e-Pares | =l10 | |
Fujitsu e-Pares | =l40 | |
Fujitsu e-Pares | =l03 | |
Fujitsu e-Pares | =l20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-2151 is classified as a high severity vulnerability due to its potential for allowing remote attackers to hijack user authentication.
To fix CVE-2010-2151, it is essential to implement anti-CSRF tokens in the application's forms that modify facility reservation data.
CVE-2010-2151 is a Cross-site Request Forgery (CSRF) vulnerability affecting the Fujitsu e-Pares software.
CVE-2010-2151 affects multiple versions of Fujitsu e-Pares, including V01 L01, L03, L10, L20, L30, and L40.
Exploiting CVE-2010-2151 could allow an attacker to hijack a user's authentication to modify facility reservation data.