CVE-2010-3544

{"id": "CVE-2010-3544", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-10-14T18:00:17.507", "references": [{"url": "http://jvn.jp/en/jp/JVN50133036/index.html", "source": "secalert_us@oracle.com"}, {"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000042.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "tags": ["US Government Resource"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console."}, {"lang": "es", "value": "Una vulnerabilidad no especificada en el componente Oracle iPlanet Web Server (Sun Java System Web Server) en Sun Products Suite de Oracle versi\u00f3n 7.0, permite a los atacantes remotos afectar la integridad y la disponibilidad por medio de vectores desconocidos relacionados con Administration. NOTA: la informaci\u00f3n anterior fue obtenida de la CPU en octubre de 2010. Oracle no ha comentado las afirmaciones de una fuente confiable de que se trata de un problema de tipo cross-site request forgery (CSRF) que permite a los atacantes remotos detener una instancia por medio de la consola de administraci\u00f3n."}], "lastModified": "2013-02-07T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:sun_products_suite:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "254C5676-E34D-432F-8BF9-F4FE0956ED1E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}