[<prev] [next>] [day] [month] [year] [list]
Message-Id: <201207130201.q6D21KRW020141@linus.mitre.org>
Date: Thu, 12 Jul 2012 22:01:20 -0400 (EDT)
From: cve-assign@...re.org
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: GLPI 0.83.2 CVE-2012-4002 CSRF and CVE-2012-4003 XSS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
https://forge.indepnet.net/projects/glpi/versions/771
CVE-2012-4002:
Bug #3704: CSRF prevention step 1
Bug #3707: CSRF prevention step 2
CVE-2012-4003:
Bug #3705: Security XSS for few items
MITRE happened to receive additional details from the discoverer
(attack vectors, etc.) but did not receive information about when (if
ever) or where the discoverer plans to publish an advisory.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/obtain_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)
iQEcBAEBAgAGBQJP/4AGAAoJEGvefgSNfHMd5eUIAJB0lo+t4gVxb43FOj7ab96M
EyULWkh7d80rujb2eQMMdS/eQuebQHO69SHncz94hndlI2f+G7FqnekMB8i9934w
cSj5/8VYVFeuthZ8s9241lafReq6jaZhpm4kWjhQor85dB5br4EZz02Ir/piGkQN
nMPvJmma8e3r12+D0VrGEJWbNv5EVVmzgk8lV3Fqt4kVPX1fuOnfWAzMZdzjQQVB
tIad/kRxdYSx+kIvo6H3Z0OanEoIYYVFhI5y11Vxm4yW4wUHsIRKvRX5Eau2e7fL
DGsWHf5ZqBT9V1K8rCo22r2NocuMNjgmWeeIpK6G/VLv7d7ZK2PHxplo6zruoYo=
=qjpy
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
