MEDIUM
(SWAT): Absent CSRF protection in various Samba web configuration formulars
Published Jul 29, 2011
6.8
MEDIUMCVSS 2.0
EPSS 10.05%
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Affected products
No data.
Configuration 1
Configuration 2
OR
- 5.0
- 6.0
- 7.0
Configuration 3
OR
- 8.04
- 10.04
- 10.10
- 11.04
No data.
Red Hat Enterprise Linux 4
samba-0:3.0.33-0.34.el4
Fixed · RHSA-2011:1219
Red Hat Enterprise Linux 5
samba-0:3.0.33-3.29.el5_7.4
Fixed · RHSA-2011:1219
Red Hat Enterprise Linux 5
samba3x-0:3.5.4-0.83.el5_7.2
Fixed · RHSA-2011:1220
Red Hat Enterprise Linux 6
cifs-utils-0:4.8.1-2.el6_1.2
Fixed · RHSA-2011:1221
Red Hat Enterprise Linux 6
samba-0:3.5.6-86.el6_1.4
Fixed · RHSA-2011:1221
Red Hat Enterprise Linux 6
samba4
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | samba-0:3.0.33-0.34.el4 | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux 5 | samba-0:3.0.33-3.29.el5_7.4 | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux 5 | samba3x-0:3.5.4-0.83.el5_7.2 | Fixed | RHSA-2011:1220 |
| Red Hat Enterprise Linux 6 | cifs-utils-0:4.8.1-2.el6_1.2 | Fixed | RHSA-2011:1221 |
| Red Hat Enterprise Linux 6 | samba-0:3.5.6-86.el6_1.4 | Fixed | RHSA-2011:1221 |
| Red Hat Enterprise Linux 6 | samba4 | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
6.8 MEDIUM NVD
AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
10.05% 0.10046
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.10046
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (18 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 10.05% (0.10046) | 95.49th | v5 (v2026.06.15) |
| Jun 15, 2026 | 10.04% (0.10038) | 95.00th | v5 (v2026.06.15) |
| Apr 7, 2026 | 18.20% (0.18197) | 95.17th | v4 (v2025.03.14) |
| Dec 14, 2025 | 19.24% (0.19243) | 95.14th | v4 (v2025.03.14) |
| Dec 1, 2025 | 14.59% (0.14586) | 94.24th | v4 (v2025.03.14) |
| Aug 31, 2025 | 12.19% (0.12185) | 93.58th | v4 (v2025.03.14) |
| Aug 30, 2025 | 14.92% (0.14917) | 94.28th | v4 (v2025.03.14) |
| Jun 19, 2025 | 30.21% (0.30210) | 96.42th | v4 (v2025.03.14) |
| Jun 9, 2025 | 23.29% (0.23288) | 95.64th | v4 (v2025.03.14) |
| Mar 29, 2025 | 21.90% (0.21901) | 93.11th | v4 (v2025.03.14) |
| Mar 21, 2025 | 18.62% (0.18624) | 94.80th | v4 (v2025.03.14) |
| Mar 17, 2025 | 11.30% (0.11299) | 93.00th | v4 (v2025.03.14) |
| Dec 17, 2024 | 3.43% (0.03434) | 91.30th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.79% (0.00790) | 80.96th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.79% (0.00790) | 78.84th | v3 (v2023.03.01) |
| Mar 6, 2023 | 12.57% (0.12567) | 95.52th | v2 (v2022.01.01) |
| Apr 1, 2022 | 12.57% (0.12567) | 95.18th | v2 (v2022.01.01) |
| Feb 4, 2022 | 12.57% (0.12567) | 90.03th | v2 (v2022.01.01) |
Weaknesses (1)
References (22)
- http://jvn.jp/en/jp/JVN29529126/index.html third-party-advisoryx_refsource_JVNThird Party Advisory
- http://marc.info/?l=bugtraq&m=133527864025056&w=2 vendor-advisoryx_refsource_HPMailing ListThird Party Advisory
- http://osvdb.org/74071 vdb-entryx_refsource_OSVDBBroken Link
- http://samba.org/samba/history/samba-3.5.10.html x_refsource_CONFIRMVendor Advisory
- http://secunia.com/advisories/45393 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/45488 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/45496 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://securityreason.com/securityalert/8317 third-party-advisoryx_refsource_SREASONThird Party Advisory
- http://securitytracker.com/id?1025852 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- http://ubuntu.com/usn/usn-1182-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- http://www.debian.org/security/2011/dsa-2290 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.exploit-db.com/exploits/17577 exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
- http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 vendor-advisoryx_refsource_HPBroken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 vendor-advisoryx_refsource_MANDRIVABroken Link
- http://www.samba.org/samba/security/CVE-2011-2522 x_refsource_CONFIRMVendor Advisory
- http://www.securityfocus.com/bid/48899 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2011-2522 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=721348 x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=8290 x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68843 vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
- https://nvd.nist.gov/vuln/detail/CVE-2011-2522
- https://www.cve.org/CVERecord?id=CVE-2011-2522
| Link | Providers | Tags |
|---|---|---|
| http://jvn.jp/en/jp/JVN29529126/index.html | third-party-advisoryx_refsource_JVNThird Party Advisory | |
| http://marc.info/?l=bugtraq&m=133527864025056&w=2 | vendor-advisoryx_refsource_HPMailing ListThird Party Advisory | |
| http://osvdb.org/74071 | vdb-entryx_refsource_OSVDBBroken Link | |
| http://samba.org/samba/history/samba-3.5.10.html | x_refsource_CONFIRMVendor Advisory | |
| http://secunia.com/advisories/45393 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/45488 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/45496 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://securityreason.com/securityalert/8317 | third-party-advisoryx_refsource_SREASONThird Party Advisory | |
| http://securitytracker.com/id?1025852 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| http://ubuntu.com/usn/usn-1182-1 | vendor-advisoryx_refsource_UBUNTUThird Party Advisory | |
| http://www.debian.org/security/2011/dsa-2290 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| http://www.exploit-db.com/exploits/17577 | exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry | |
| http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 | vendor-advisoryx_refsource_HPBroken Link | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 | vendor-advisoryx_refsource_MANDRIVABroken Link | |
| http://www.samba.org/samba/security/CVE-2011-2522 | x_refsource_CONFIRMVendor Advisory | |
| http://www.securityfocus.com/bid/48899 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://access.redhat.com/security/cve/CVE-2011-2522 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=721348 | x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory | |
| https://bugzilla.samba.org/show_bug.cgi?id=8290 | x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/68843 | vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry | |
| https://nvd.nist.gov/vuln/detail/CVE-2011-2522 | ||
| https://www.cve.org/CVERecord?id=CVE-2011-2522 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 29, 2011
Updated Aug 6, 2024
Reserved Jun 15, 2011
Link CVE-2011-2522
CISA Vulnrichment
Updated n/a