CVE-2012-4002
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Una vulnerabilidad de falsificación de peticiones en sitios cruzados (CSRF). en GLPI-PROJECT GLPI antes de v0.83.3 permite a atacantes remotos secuestrar la autenticación de las víctimas a través de vectores desconocidos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-07-12 CVE Reserved
- 2012-08-15 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2012/07/13/1 | Mailing List |
|
| https://forge.indepnet.net/issues/3704 | X_refsource_confirm | |
| https://forge.indepnet.net/issues/3707 | X_refsource_confirm | |
| https://forge.indepnet.net/projects/glpi/versions/771 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:132 | 2013-04-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | <= 0.83.2 Search vendor "Glpi-project" for product "Glpi" and version " <= 0.83.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.5 Search vendor "Glpi-project" for product "Glpi" and version "0.5" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.6 Search vendor "Glpi-project" for product "Glpi" and version "0.6" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.20 Search vendor "Glpi-project" for product "Glpi" and version "0.20" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.21 Search vendor "Glpi-project" for product "Glpi" and version "0.21" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.30 Search vendor "Glpi-project" for product "Glpi" and version "0.30" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.31 Search vendor "Glpi-project" for product "Glpi" and version "0.31" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.40 Search vendor "Glpi-project" for product "Glpi" and version "0.40" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.41 Search vendor "Glpi-project" for product "Glpi" and version "0.41" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.42 Search vendor "Glpi-project" for product "Glpi" and version "0.42" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.51 Search vendor "Glpi-project" for product "Glpi" and version "0.51" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.51a Search vendor "Glpi-project" for product "Glpi" and version "0.51a" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.65 Search vendor "Glpi-project" for product "Glpi" and version "0.65" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68 Search vendor "Glpi-project" for product "Glpi" and version "0.68" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.1 Search vendor "Glpi-project" for product "Glpi" and version "0.68.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.2 Search vendor "Glpi-project" for product "Glpi" and version "0.68.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.68.3 Search vendor "Glpi-project" for product "Glpi" and version "0.68.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70 Search vendor "Glpi-project" for product "Glpi" and version "0.70" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70.1 Search vendor "Glpi-project" for product "Glpi" and version "0.70.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.70.2 Search vendor "Glpi-project" for product "Glpi" and version "0.70.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71 Search vendor "Glpi-project" for product "Glpi" and version "0.71" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.1 Search vendor "Glpi-project" for product "Glpi" and version "0.71.1" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.2 Search vendor "Glpi-project" for product "Glpi" and version "0.71.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.3 Search vendor "Glpi-project" for product "Glpi" and version "0.71.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.4 Search vendor "Glpi-project" for product "Glpi" and version "0.71.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.5 Search vendor "Glpi-project" for product "Glpi" and version "0.71.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.71.6 Search vendor "Glpi-project" for product "Glpi" and version "0.71.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc1 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc2 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72 Search vendor "Glpi-project" for product "Glpi" and version "0.72" | rc3 |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.1 Search vendor "Glpi-project" for product "Glpi" and version "0.72.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.2 Search vendor "Glpi-project" for product "Glpi" and version "0.72.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.3 Search vendor "Glpi-project" for product "Glpi" and version "0.72.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.72.4 Search vendor "Glpi-project" for product "Glpi" and version "0.72.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78 Search vendor "Glpi-project" for product "Glpi" and version "0.78" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.1 Search vendor "Glpi-project" for product "Glpi" and version "0.78.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.2 Search vendor "Glpi-project" for product "Glpi" and version "0.78.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.3 Search vendor "Glpi-project" for product "Glpi" and version "0.78.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.4 Search vendor "Glpi-project" for product "Glpi" and version "0.78.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.78.5 Search vendor "Glpi-project" for product "Glpi" and version "0.78.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80 Search vendor "Glpi-project" for product "Glpi" and version "0.80" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.1 Search vendor "Glpi-project" for product "Glpi" and version "0.80.1" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.2 Search vendor "Glpi-project" for product "Glpi" and version "0.80.2" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.3 Search vendor "Glpi-project" for product "Glpi" and version "0.80.3" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.4 Search vendor "Glpi-project" for product "Glpi" and version "0.80.4" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.5 Search vendor "Glpi-project" for product "Glpi" and version "0.80.5" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.6 Search vendor "Glpi-project" for product "Glpi" and version "0.80.6" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.7 Search vendor "Glpi-project" for product "Glpi" and version "0.80.7" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.80.61 Search vendor "Glpi-project" for product "Glpi" and version "0.80.61" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83 Search vendor "Glpi-project" for product "Glpi" and version "0.83" | - |
Affected
| ||||||
| Glpi-project Search vendor "Glpi-project" | Glpi Search vendor "Glpi-project" for product "Glpi" | 0.83.1 Search vendor "Glpi-project" for product "Glpi" and version "0.83.1" | - |
Affected
| ||||||