CVE-2010-3544: CSRF
First published: Thu Oct 14 2010(Updated: )
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Sun Products Suite | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-3544?
CVE-2010-3544 is considered to have a moderate severity level due to potential impacts on the integrity and availability of the Oracle iPlanet Web Server.
How do I fix CVE-2010-3544?
To fix CVE-2010-3544, you should apply the latest security patches provided by Oracle for the Sun Products Suite version 7.0.
What components are affected by CVE-2010-3544?
CVE-2010-3544 affects the Administration component of the Oracle iPlanet Web Server in the Sun Products Suite.
Can CVE-2010-3544 be exploited remotely?
Yes, CVE-2010-3544 can be exploited by remote attackers using unspecified vectors.
What could be the consequences of exploiting CVE-2010-3544?
Exploiting CVE-2010-3544 could potentially compromise the integrity and availability of the affected systems.
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/tags
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/oracle
- canonical/oracle sun products suite
- version/oracle sun products suite/7.0