Base Score

MEDIUM6.5

CVE-2004-1995

Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.

VectorNETWORK

Published Bycve@mitre.org

Published DateDec 31, 2004, 05:00

Weakness Type (CWE):CWE-352

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

http://marc.info/?l=bugtraq&m=108377423825478&w=2
http://secunia.com/advisories/11555
http://securitytracker.com/id?1010080
http://www.osvdb.org/5895
http://www.securityfocus.com/bid/10276
https://exchange.xforce.ibmcloud.com/vulnerabilities/16080

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-352

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE