CVE-2012-4002: CSRF
Published Oct 9, 2012
·Updated
Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
68 affected components
GLPI-PROJECT GLPI<=0.83.2
GLPI-PROJECT GLPI=0.5
GLPI-PROJECT GLPI=0.5-rc1
GLPI-PROJECT GLPI=0.5-rc2
GLPI-PROJECT GLPI=0.6
GLPI-PROJECT GLPI=0.6-rc1
GLPI-PROJECT GLPI=0.6-rc2
GLPI-PROJECT GLPI=0.6-rc3
GLPI-PROJECT GLPI=0.20
GLPI-PROJECT GLPI=0.21
GLPI-PROJECT GLPI=0.30
GLPI-PROJECT GLPI=0.31
GLPI-PROJECT GLPI=0.40
GLPI-PROJECT GLPI=0.41
GLPI-PROJECT GLPI=0.42
GLPI-PROJECT GLPI=0.51
GLPI-PROJECT GLPI=0.51a
GLPI-PROJECT GLPI=0.65
GLPI-PROJECT GLPI=0.65-rc1
GLPI-PROJECT GLPI=0.65-rc2
GLPI-PROJECT GLPI=0.68
GLPI-PROJECT GLPI=0.68-rc1
GLPI-PROJECT GLPI=0.68-rc2
GLPI-PROJECT GLPI=0.68-rc3
GLPI-PROJECT GLPI=0.68.1
GLPI-PROJECT GLPI=0.68.2
GLPI-PROJECT GLPI=0.68.3
GLPI-PROJECT GLPI=0.70
GLPI-PROJECT GLPI=0.70-rc1
GLPI-PROJECT GLPI=0.70-rc2
GLPI-PROJECT GLPI=0.70-rc3
GLPI-PROJECT GLPI=0.70.1
GLPI-PROJECT GLPI=0.70.2
GLPI-PROJECT GLPI=0.71
GLPI-PROJECT GLPI=0.71.1
GLPI-PROJECT GLPI=0.71.1-rc1
GLPI-PROJECT GLPI=0.71.1-rc2
GLPI-PROJECT GLPI=0.71.1-rc3
GLPI-PROJECT GLPI=0.71.2
GLPI-PROJECT GLPI=0.71.3
GLPI-PROJECT GLPI=0.71.4
GLPI-PROJECT GLPI=0.71.5
GLPI-PROJECT GLPI=0.71.6
GLPI-PROJECT GLPI=0.72
GLPI-PROJECT GLPI=0.72-rc1
GLPI-PROJECT GLPI=0.72-rc2
GLPI-PROJECT GLPI=0.72-rc3
GLPI-PROJECT GLPI=0.72.1
GLPI-PROJECT GLPI=0.72.2
GLPI-PROJECT GLPI=0.72.3
GLPI-PROJECT GLPI=0.72.4
GLPI-PROJECT GLPI=0.78
GLPI-PROJECT GLPI=0.78.1
GLPI-PROJECT GLPI=0.78.2
GLPI-PROJECT GLPI=0.78.3
GLPI-PROJECT GLPI=0.78.4
GLPI-PROJECT GLPI=0.78.5
GLPI-PROJECT GLPI=0.80
GLPI-PROJECT GLPI=0.80.1
GLPI-PROJECT GLPI=0.80.2
GLPI-PROJECT GLPI=0.80.3
GLPI-PROJECT GLPI=0.80.4
GLPI-PROJECT GLPI=0.80.5
GLPI-PROJECT GLPI=0.80.6
GLPI-PROJECT GLPI=0.80.7
GLPI-PROJECT GLPI=0.80.61
GLPI-PROJECT GLPI=0.83
GLPI-PROJECT GLPI=0.83.1
Event History
Oct 9, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4002?
CVE-2012-4002 is classified as a medium severity vulnerability due to its potential to hijack victim authentication through Cross-Site Request Forgery.
2
How do I fix CVE-2012-4002?
To fix CVE-2012-4002, upgrade GLPI to version 0.83.3 or later.
3
What systems are affected by CVE-2012-4002?
CVE-2012-4002 affects all versions of GLPI below 0.83.3.
4
What type of vulnerability is CVE-2012-4002?
CVE-2012-4002 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Can CVE-2012-4002 be exploited remotely?
Yes, CVE-2012-4002 can be exploited remotely by attackers to hijack user sessions.