Oval Definition:oval:com.ubuntu.xenial:def:201668930000000
Revision Date:2016-09-02Version:1
Title:CVE-2016-6893 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-6893
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND mailman package in xenial was vulnerable but has been fixed (note: '1:2.1.20-1ubuntu0.1').
    • BACK