CVE-2011-1026: CSRF
Published Jun 2, 2011
·Updated
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
Affected Software
18 affected components
Apache Archiva=1.2.1
Apache Archiva=1.3.3
Apache Archiva=1.0.3
Apache Archiva=1.1.4
Apache Archiva=1.2
Apache Archiva=1.2.2
Apache Archiva=1.0
Apache Archiva=1.1.3
Apache Archiva=1.0.1
Apache Archiva=1.3.4
Apache Archiva=1.3
Apache Archiva=1.2-m1
Apache Archiva=1.1.2
Apache Archiva=1.1
Apache Archiva=1.3.1
Apache Archiva=1.1.1
Apache Archiva=1.0.2
Apache Archiva=1.3.2
Event History
Jun 2, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1026?
CVE-2011-1026 has a moderate severity level due to the potential for cross-site request forgery attacks.
2
How do I fix CVE-2011-1026?
To fix CVE-2011-1026, upgrade Apache Archiva to version 1.3.5 or later.
3
What versions of Apache Archiva are affected by CVE-2011-1026?
CVE-2011-1026 affects Apache Archiva versions 1.0 through 1.2.2 and all 1.3.x versions prior to 1.3.5.
4
What is the impact of CVE-2011-1026 on Apache Archiva?
The impact of CVE-2011-1026 is that it allows remote attackers to hijack the authentication of administrators through CSRF attacks.
5
Is there a workaround for CVE-2011-1026 if I cannot update?
There are no documented workarounds for CVE-2011-1026, so upgrading is strongly recommended to mitigate the vulnerability.