ByteOS Network

CVE Vulnerability Details :

CVE-2010-3449

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-06 Dec, 2010 | 20:00

Updated At-07 Aug, 2024 | 03:11

▼CVE Numbering Authority (CNA)

Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/42376	third-party-advisory x_refsource_SECUNIA
http://jira.codehaus.org/browse/MRM-1438	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2011/Feb/238	mailing-list x_refsource_FULLDISC
http://www.securityfocus.com/bid/45095	vdb-entry x_refsource_BID
http://svn.apache.org/viewvc?view=revision&revision=1066010	x_refsource_CONFIRM
http://secunia.com/advisories/43261	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/516341/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/pom.xml?r1=1038518&r2=1038517&pathrev=1038518	x_refsource_CONFIRM
http://archiva.apache.org/security.html	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0373	vdb-entry x_refsource_VUPEN
http://svn.apache.org/viewvc?view=revision&revision=1038518	x_refsource_CONFIRM
http://www.osvdb.org/69520	vdb-entry x_refsource_OSVDB
http://www.vupen.com/english/advisories/2010/3098	vdb-entry x_refsource_VUPEN
http://mail-archives.apache.org/mod_mbox/archiva-users/201011.mbox/ajax/%3CAANLkTimXejHAuXdoUKLN=GkNty1_XnRCbv0YA0T2cS_2%40mail.gmail.com%3E	mailing-list x_refsource_MLIST
http://mail-archives.apache.org/mod_mbox/continuum-users/201102.mbox/%3C032C189E-D821-4833-A8F2-F72365147695%40apache.org%3E	mailing-list x_refsource_MLIST
http://continuum.apache.org/security.html	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/514937/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml?r1=1038518&r2=1038517&pathrev=1038518	x_refsource_CONFIRM
http://www.securitytracker.com/id?1025066	vdb-entry x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/42376

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://jira.codehaus.org/browse/MRM-1438

Resource:

x_refsource_CONFIRM

Hyperlink: http://seclists.org/fulldisclosure/2011/Feb/238

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www.securityfocus.com/bid/45095

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://svn.apache.org/viewvc?view=revision&revision=1066010

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/43261

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/516341/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/pom.xml?r1=1038518&r2=1038517&pathrev=1038518

Resource:

x_refsource_CONFIRM

Hyperlink: http://archiva.apache.org/security.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0373

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://svn.apache.org/viewvc?view=revision&revision=1038518

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.osvdb.org/69520

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.vupen.com/english/advisories/2010/3098

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://mail-archives.apache.org/mod_mbox/archiva-users/201011.mbox/ajax/%3CAANLkTimXejHAuXdoUKLN=GkNty1_XnRCbv0YA0T2cS_2%40mail.gmail.com%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://mail-archives.apache.org/mod_mbox/continuum-users/201102.mbox/%3C032C189E-D821-4833-A8F2-F72365147695%40apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://continuum.apache.org/security.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/archive/1/514937/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml?r1=1038518&r2=1038517&pathrev=1038518

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id?1025066

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/42376	third-party-advisory x_refsource_SECUNIA x_transferred
http://jira.codehaus.org/browse/MRM-1438	x_refsource_CONFIRM x_transferred
http://seclists.org/fulldisclosure/2011/Feb/238	mailing-list x_refsource_FULLDISC x_transferred
http://www.securityfocus.com/bid/45095	vdb-entry x_refsource_BID x_transferred
http://svn.apache.org/viewvc?view=revision&revision=1066010	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43261	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/516341/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/pom.xml?r1=1038518&r2=1038517&pathrev=1038518	x_refsource_CONFIRM x_transferred
http://archiva.apache.org/security.html	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0373	vdb-entry x_refsource_VUPEN x_transferred
http://svn.apache.org/viewvc?view=revision&revision=1038518	x_refsource_CONFIRM x_transferred
http://www.osvdb.org/69520	vdb-entry x_refsource_OSVDB x_transferred
http://www.vupen.com/english/advisories/2010/3098	vdb-entry x_refsource_VUPEN x_transferred
http://mail-archives.apache.org/mod_mbox/archiva-users/201011.mbox/ajax/%3CAANLkTimXejHAuXdoUKLN=GkNty1_XnRCbv0YA0T2cS_2%40mail.gmail.com%3E	mailing-list x_refsource_MLIST x_transferred
http://mail-archives.apache.org/mod_mbox/continuum-users/201102.mbox/%3C032C189E-D821-4833-A8F2-F72365147695%40apache.org%3E	mailing-list x_refsource_MLIST x_transferred
http://continuum.apache.org/security.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/archive/1/514937/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://svn.apache.org/viewvc/archiva/branches/archiva-1.3.x/archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml?r1=1038518&r2=1038517&pathrev=1038518	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id?1025066	vdb-entry x_refsource_SECTRACK x_transferred