[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] GLPI 0.83.2 CVE-2012-4002 CSRF and CVE-2012-4003 XSS
From:       cve-assign () mitre ! org
Date:       2012-07-13 2:01:20
Message-ID: 201207130201.q6D21KRW020141 () linus ! mitre ! org
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

https://forge.indepnet.net/projects/glpi/versions/771

CVE-2012-4002:
  Bug #3704: CSRF prevention step 1
  Bug #3707: CSRF prevention step 2

CVE-2012-4003:
  Bug #3705: Security XSS for few items

MITRE happened to receive additional details from the discoverer
(attack vectors, etc.) but did not receive information about when (if
ever) or where the discoverer plans to publish an advisory.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/obtain_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)

iQEcBAEBAgAGBQJP/4AGAAoJEGvefgSNfHMd5eUIAJB0lo+t4gVxb43FOj7ab96M
EyULWkh7d80rujb2eQMMdS/eQuebQHO69SHncz94hndlI2f+G7FqnekMB8i9934w
cSj5/8VYVFeuthZ8s9241lafReq6jaZhpm4kWjhQor85dB5br4EZz02Ir/piGkQN
nMPvJmma8e3r12+D0VrGEJWbNv5EVVmzgk8lV3Fqt4kVPX1fuOnfWAzMZdzjQQVB
tIad/kRxdYSx+kIvo6H3Z0OanEoIYYVFhI5y11Vxm4yW4wUHsIRKvRX5Eau2e7fL
DGsWHf5ZqBT9V1K8rCo22r2NocuMNjgmWeeIpK6G/VLv7d7ZK2PHxplo6zruoYo=
=qjpy
-----END PGP SIGNATURE-----
[prev in list] [next in list] [prev in thread] [next in thread]