ID de Prueba:	1.3.6.1.4.1.25623.1.0.801942
Categoría:	Web application abuses
Título:	Apache Archiva <= 1.3.4 Multiple Vulnerabilities - Active Check
Resumen:	Apache Archiva is prone to multiple vulnerabilities.
Descripción:	Summary: Apache Archiva is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to insufficient input validation in the input fields throughout the application. Successful exploitation could allow an attacker to compromise the application. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary HTML codes, theft of cookie-based authentication credentials, arbitrary URL redirection, disclosure or modification of sensitive data and phishing attacks. Affected Software/OS: Apache Archiva version 1.3.4 and prior. Solution: Update to version 1.3.5 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1077 BugTraq ID: 48011 http://www.securityfocus.com/bid/48011 Bugtraq: 20110527 [SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability (Google Search) http://www.securityfocus.com/archive/1/518167/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0531.html http://secunia.com/advisories/44693 http://securityreason.com/securityalert/8267 XForce ISS Database: archiva-multiple-xss(67672) https://exchange.xforce.ibmcloud.com/vulnerabilities/67672 Common Vulnerability Exposure (CVE) ID: CVE-2011-1026 BugTraq ID: 48015 http://www.securityfocus.com/bid/48015 Bugtraq: 20110527 [SECURITY] CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability (Google Search) http://www.securityfocus.com/archive/1/518168/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0532.html http://securityreason.com/securityalert/8266 XForce ISS Database: archiva-multiple-csrf(67671) https://exchange.xforce.ibmcloud.com/vulnerabilities/67671
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.