Language:
Severity: High
ID: 106506
File Name: pfsense_SA-17_09.nasl
Version: 1.7
Type: remote
Family: CGI abuses : XSS
Published: 1/31/2018
Updated: 7/25/2018
Supported Sensors: Nessus
Risk Factor: High
Score: 7.4
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CPE: cpe:/a:pfsense:pfsense, cpe:/a:bsdperimeter:pfsense
Required KB Items: Host/pfSense
Exploit Ease: No exploit is required
Patch Publication Date: 10/31/2017
Vulnerability Publication Date: 11/14/2017
Metasploit (Clickjacking Vulnerability In CSRF Error Page pfSense)
CVE: CVE-2017-1000479