CVE-2009-0039 Apache Geronimo Application Server CSRF vulnerabilities

What is CVE-2009-0039?

CVE-2009-0039 is a medium-severity vulnerability in n/a, published on 17 Apr 2009. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown.

Weakness: CWE-352

Which versions are affected by CVE-2009-0039?

2 open source packages ship an affected version, including org.apache.geronimo.plugins:console. It affects 1 product.

Products include Apache Geronimo.

How do I fix CVE-2009-0039?

Upgrade org.apache.geronimo.plugins:console to 2.1.4 or later.

Is CVE-2009-0039 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-0039 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2013-1777 Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1 Critical 10.0
• CVE-2007-4548 Auth bypass in n/a Critical 10.0
• CVE-2008-5518 Apache Geronimo Application Server multiple directory traversal vulnerabilities Critical 9.4
• CVE-2011-5034 Apache Geronimo Hash Collisions Cause DoS High 7.8
• CVE-2007-5797 Auth bypass in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-678x-xfp4-r92r.