CVE-2011-0545

Description

Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/66213

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0563

http://www.vupen.com/english/advisories/2011/0727

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00

http://www.securityfocus.com/archive/1/517109/100/0/threaded

http://www.osvdb.org/71261

http://www.exploit-db.com/exploits/17026

http://sotiriu.de/adv/NSOADV-2011-001.txt

http://securitytracker.com/id?1025242

http://securityreason.com/securityalert/8160

http://secunia.com/advisories/43820

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS