CVE-2014-3115
published 2014-05-08CVE-2014-3115: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack…
PriorityP425medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.18%
64.0th percentile
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortiweb | <= 5.1.4 | — |
| fortinet | fortiweb | — | — |
| fortinet | fortiweb | — | — |
| fortinet | fortiweb | — | — |
| fortinet | fortiweb | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7qxv-9465-xvp7: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5
ghsa_unreviewed·2022-05-17
CVE-2014-3115 [MEDIUM] CWE-352 GHSA-7qxv-9465-xvp7: Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.
Red Hat
flash-plugin: information disclosure issues fixed in APSB15-16
vendor_redhat·2015-07-08·CVSS 5.0
CVE-2015-3125 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-5116.
Red Hat
flash-plugin: information disclosure issues fixed in APSB15-16
vendor_redhat·2015-07-08·CVSS 5.0
CVE-2015-3115 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.
Red Hat
flash-plugin: information disclosure issues fixed in APSB15-16
vendor_redhat·2015-07-08·CVSS 5.0
CVE-2015-5116 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-3125.
Red Hat
flash-plugin: information disclosure issues fixed in APSB15-16
vendor_redhat·2015-07-08·CVSS 5.0
CVE-2015-3116 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3125, and CVE-2015-5116.
Red Hat
flash-plugin: information disclosure issues fixed in APSB15-16
vendor_redhat·2015-07-08·CVSS 5.0
CVE-2014-0578 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.
No detection rules found.
No public exploits indexed.
HackerOne
CSRF possible when SOP Bypass/UXSS is available
hackerone·2015-12-30·CVSS 5.0
[MEDIUM] CSRF possible when SOP Bypass/UXSS is available
CSRF possible when SOP Bypass/UXSS is available
**Description**
If an attacker could extract content from https://hackerone.com, they could perform CSRF attacks due to the fact that:
1. Some pages prints the token in the HTML response (edit user form at https://hackerone.com/settings/profile/edit)
2. Tokens aren't bound per action
3. PATCH/DELETE can be sent via _method
Attacker being allowed to read content but not execute JS could happen if:
1. SOP Bypass in plugin (http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3115)
2. SOP Bypass in application design (https://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/)
3. UXSS (https://blog.innerht.ml/ie-uxss/)
Currently, some mitigations are in place. _method isn't allowed in GET and the Origin header is checked. This isn'
Bugzilla
flash-plugin: information disclosure issues fixed in APSB15-16
bugzilla·2015-07-08·CVSS 5.0
CVE-2015-3114 [MEDIUM] flash-plugin: information disclosure issues fixed in APSB15-16
flash-plugin: information disclosure issues fixed in APSB15-16
Adobe Security Bulletin APSB15-16 for Adobe Flash Player describes a security bypass and multiple same-origin-policy bypass vulnerabilities that can be used to disclose sensitive information when Flash Player is used to play a specially crafted SWF file.
Quoting from the APSB15-16:
These updates resolve a security bypass vulnerability that could lead to information disclosure (CVE-2015-3114).
These updates resolve vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116).
External References:
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
Discussion:
This issue has been add
http://seclists.org/fulldisclosure/2014/May/30http://www.fortiguard.com/advisory/FG-IR-14-013/http://www.kb.cert.org/vuls/id/902790http://www.securitytracker.com/id/1030200http://seclists.org/fulldisclosure/2014/May/30http://www.fortiguard.com/advisory/FG-IR-14-013/http://www.kb.cert.org/vuls/id/902790http://www.securitytracker.com/id/1030200
2014-05-08
Published