{"api_version":"1","generated_at":"2026-07-23T03:12:58+00:00","cve":"CVE-2012-3362","urls":{"html":"https://cve.report/CVE-2012-3362","api":"https://cve.report/api/cve/CVE-2012-3362.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-3362","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-3362"},"summary":{"title":"CVE-2012-3362","description":"Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.","state":"PUBLISHED","assigner":"redhat","published_at":"2012-07-12 20:55:16","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/06/27/1","name":"http://www.openwall.com/lists/oss-security/2012/06/27/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: CSRF in eXtplorer","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2012/dsa-2510","name":"http://www.debian.org/security/2012/dsa-2510","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2510-1 extplorer","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html","name":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"eXtplorer 2.1 RC3 Cross-site Request Forgery","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/25/1","name":"http://www.openwall.com/lists/oss-security/2012/06/25/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: CSRF in eXtplorer","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/24/1","name":"http://www.openwall.com/lists/oss-security/2012/06/24/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE request: CSRF in eXtplorer","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/06/26/1","name":"http://www.openwall.com/lists/oss-security/2012/06/26/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: CSRF in eXtplorer","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3362","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3362","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"3362","vulnerable":"1","versionEndIncluding":"2.1.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"extplorer","cpe5":"extplorer","cpe6":"*","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T20:05:11.734Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html"},{"name":"DSA-2510","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2012/dsa-2510"},{"name":"[oss-security] 20120624 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/06/25/1"},{"name":"[oss-security] 20120624 CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/06/24/1"},{"name":"[oss-security] 20120626 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/06/26/1"},{"name":"[oss-security] 20120627 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/06/27/1"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-04-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2012-07-27T09:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html"},{"name":"DSA-2510","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2012/dsa-2510"},{"name":"[oss-security] 20120624 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/06/25/1"},{"name":"[oss-security] 20120624 CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/06/24/1"},{"name":"[oss-security] 20120626 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/06/26/1"},{"name":"[oss-security] 20120627 Re: CVE request: CSRF in eXtplorer","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/06/27/1"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2012-3362","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html","refsource":"MISC","url":"http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html"},{"name":"DSA-2510","refsource":"DEBIAN","url":"http://www.debian.org/security/2012/dsa-2510"},{"name":"[oss-security] 20120624 Re: CVE request: CSRF in eXtplorer","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/06/25/1"},{"name":"[oss-security] 20120624 CVE request: CSRF in eXtplorer","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/06/24/1"},{"name":"[oss-security] 20120626 Re: CVE request: CSRF in eXtplorer","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/06/26/1"},{"name":"[oss-security] 20120627 Re: CVE request: CSRF in eXtplorer","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/06/27/1"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2012-3362","datePublished":"2012-07-12T20:00:00.000Z","dateReserved":"2012-06-14T00:00:00.000Z","dateUpdated":"2024-08-06T20:05:11.734Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-07-12 20:55:16","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extplorer:extplorer:*:rc3:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"4DF78652-929A-4692-AC77-ACDCD3C8468F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"3362","Ordinal":"1","Title":"CVE-2012-3362","CVE":"CVE-2012-3362","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"3362","Ordinal":"1","NoteData":"Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.","Type":"Description","Title":"CVE-2012-3362"},{"CveYear":"2012","CveId":"3362","Ordinal":"2","NoteData":"2012-07-12","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"3362","Ordinal":"3","NoteData":"2012-07-27","Type":"Other","Title":"Modified"}]}}}