Home > Vulnerability Database > CVE-2016-7123

Mend Vulnerability Database

New vulnerability? Tell us about it!

CVE-2016-7123

Good to know:

Date: September 2, 2016

Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.

Severity Score

8.8

Related Resources (5)

Url: https://access.redhat.com/security/cve/CVE-2016-7123

Url: https://nvd.nist.gov/vuln/detail/CVE-2016-7123

Url: https://bugs.launchpad.net/bugs/1614841

Url: http://www.securityfocus.com/bid/92732

Url: https://www.mend.io/vulnerability-database/CVE-2016-7123

Severity Score

8.8

Weakness Type (CWE)

Cross-Site Request Forgery (CSRF)

CWE-352

Top Fix

Upgrade Version

CVSS v3

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us