CVE-2007-3464 in Safe@Office 500 Utm
Summary
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/27/2007
Disclosure
06/27/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 37538 | SofaWare Safe@Office 500 Utm cross-site request forgery | 352 | Unproven | Official fix | CVE-2007-3464 |