VulnerabilityModified
CVE-2008-3736
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a)…
MEDIUM 6.0EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.
- CVSS 2.0
- 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- spacetag/lacoodast · system consultants/la cooda wiz
- Source
- cve@mitre.org
References
- http://jvn.jp/en/jp/JVN83428818/index.html
- http://secunia.com/advisories/31574Vendor Advisory
- http://secunia.com/advisories/31582Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm
- http://www.securityfocus.com/bid/30791
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44592
- http://jvn.jp/en/jp/JVN83428818/index.html
- http://secunia.com/advisories/31574Vendor Advisory
- http://secunia.com/advisories/31582Vendor Advisory
- http://wiz.syscon.co.jp/Details.htm
- http://www.securityfocus.com/bid/30791
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44592
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.