ByteOS Network

CVE Vulnerability Details :

CVE-2017-7556

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-17 Aug, 2017 | 19:00

Updated At-05 Aug, 2024 | 16:04

▼CVE Numbering Authority (CNA)

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

Affected Products

Vendor

Red Hat, Inc.

Product

hawtio

Versions

Affected

up to and including 1.5.3

Problem Types

Type	CWE ID	Description
CWE	CWE-352	CWE-352

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1480060	x_refsource_CONFIRM
http://www.securityfocus.com/bid/100411	vdb-entry x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1480060	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/100411	vdb-entry x_refsource_BID x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References