ID de Prueba:	1.3.6.1.4.1.25623.1.0.807898
Categoría:	Web application abuses
Título:	Apache Jackrabbit Cross-Site Request Forgery (CSRF) Vulnerability - Linux
Resumen:	Apache Jackrabbit is prone to a cross-site request forgery; (CSRF) vulnerability.
Descripción:	Summary: Apache Jackrabbit is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The flaw is due to error in content-type check for POST requests which does not handle missing Content-Type header fields, nor variations in field values with respect to upper/lower case or optional parameters. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct CSRF attacks. Affected Software/OS: Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 on linux. Solution: Upgrade to Apache Jackrabbit 2.4.6 or 2.6.6 or 2.8.3 or 2.10.4 or 2.12.4 or 2.13.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6801 BugTraq ID: 92966 http://www.securityfocus.com/bid/92966 Debian Security Information: DSA-3679 (Google Search) http://www.debian.org/security/2016/dsa-3679 http://www.openwall.com/lists/oss-security/2016/09/14/6
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.