Cross-Site Request Forgery Vulnerability in Polarion Subversion Webclient
CVE-2020-15789

8.1HIGH

Key Information:

Vendor
Siemens
Status
Polarion Subversion Webclient
Vendor
CVE Published:
9 September 2020

Summary

A vulnerability in the Polarion Subversion Webclient allows for potential Cross-Site Request Forgery (CSRF) attacks. If an authenticated user interacts with a manipulated link, an attacker can execute unintended actions within the web interface on behalf of the user. This exploitation could lead to unauthorized reading or modification of sensitive content within the web application, posing significant security risks to the affected system.

Affected Version(s)

Polarion Subversion Webclient All versions

References

https://cert-portal.siemens.com/productcert/pdf/ssa-43652...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.