CVEvulnerability
CVE-2009-1733
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors.
Affected configurations
• richard ellerbrock ipplan 4.91a
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://holisticinfosec.org/content/view/113/45/ holisticinfosec.org
- http://osvdb.org/54601 osvdb.org
- http://secunia.com/advisories/34985 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50632 exchange.xforce.ibmcloud.com
- http://holisticinfosec.org/content/view/113/45/ holisticinfosec.org
- http://osvdb.org/54601 osvdb.org
- http://secunia.com/advisories/34985 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50632 exchange.xforce.ibmcloud.com