Intrusion PreventionApache.Archiva.UserEdit.CSRF
Description
This indicates an attack attempt against a cross-site request-forgery vulnerability in Apache Archiva.
An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.
Affected Products
Apache Software Foundation Continuum Data Management 1.2.3.1
Apache Software Foundation Continuum 1.4
Apache Software Foundation Continuum 1.3.6
Apache Software Foundation Continuum 1.0.2
Apache Archiva 1.3.1
Apache Archiva 1.2.2
Apache Archiva 1.1.4
Apache Archiva 1.0.3
Apache Archiva 1.3
Apache Archiva 1.2
Apache Archiva 1.1
Apache Archiva 1.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the latest update from the vendor.
http://archiva.apache.org/download.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 26935 |
| Created | Jul 06, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2010-3449 |
| Exploit Prediction Score | 1.54% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, Solaris, MacOS |
| Affected App | Apache |