CVE-2010-5283: opentext livelink_ecm Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2010-5283 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in opentext livelink_ecm. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 26-11-2012
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.