CVE-2010-3449
- State
- Published
- Severity
- Not scored
- Published
- Dec 6, 2010
- Updated
- Aug 7, 2024
- Reserved
- Sep 17, 2010
Description
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 42376third-party-advisory
- http://jira.codehaus.org/browse/MRM-1438
- 20110211 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerabilitymailing-list
- 45095vdb-entry
- http://svn.apache.org/viewvc?view=revision&revision=1066010
- 43261third-party-advisory
- 20110210 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerabilitymailing-list
- http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/pom.xml?r1=1038518&r2=1038517&pathrev=1038518
- http://archiva.apache.org/security.html
- ADV-2011-0373vdb-entry
- http://svn.apache.org/viewvc?view=revision&revision=1038518
- 69520vdb-entry
- ADV-2010-3098vdb-entry
- [archiva-users] 20101129 Apache Archiva CSRF Vulnerabilitymailing-list
- [continuum-users] 20110210 [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerabilitymailing-list
- http://continuum.apache.org/security.html
- 20101129 [CVE-2010-3449] Apache Archiva CSRF Vulnerabilitymailing-list
- http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml?r1=1038518&r2=1038517&pathrev=1038518
- 1025066vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.