CVEvulnerability
CVE-2011-0545
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified other impact, via the userRole parameter.
Affected configurations
• symantec liveupdate administrator 2.2.2.9
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/43820 Vendor Advisory
- http://securityreason.com/securityalert/8160 securityreason.com
- http://securitytracker.com/id?1025242 Exploit
- http://sotiriu.de/adv/NSOADV-2011-001.txt Exploit
- http://www.exploit-db.com/exploits/17026 Exploit
- http://www.osvdb.org/71261 www.osvdb.org
- http://www.securityfocus.com/archive/1/517109/100/0/threaded www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00 www.symantec.com
- http://www.vupen.com/english/advisories/2011/0727 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66213 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43820 Vendor Advisory
- http://securityreason.com/securityalert/8160 securityreason.com
- http://securitytracker.com/id?1025242 Exploit
- http://sotiriu.de/adv/NSOADV-2011-001.txt Exploit
- http://www.exploit-db.com/exploits/17026 Exploit
- http://www.osvdb.org/71261 www.osvdb.org
- http://www.securityfocus.com/archive/1/517109/100/0/threaded www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00 www.symantec.com
- http://www.vupen.com/english/advisories/2011/0727 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66213 exchange.xforce.ibmcloud.com