Cross-Site Request Forgery in Fujitsu e-Pares Products
CVE-2010-2151

Currently unrated

Key Information:

Vendor

Fujitsu

Status
E-pares
Vendor
CVE Published:
3 June 2010

What is CVE-2010-2151?

A CSRF vulnerability exists in various versions of Fujitsu's e-Pares system, enabling remote attackers to exploit session hijacking and perform unauthorized modifications to facility reservation data. This security issue arises from unprotected HTTP requests that allow attackers to manipulate user actions without proper authentication, putting data integrity and confidentiality at risk.

References

http://www.securityfocus.com/bid/40517
vdb-entryx_refsource_BID
http://jvn.jp/en/jp/JVN82465391/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000022.html
third-party-advisoryx_refsource_JVNDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.
CVE-2010-2151 : Cross-Site Request Forgery in Fujitsu e-Pares Products