CVE-2011-0650 in Security Assistantinfo

Summary

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

01/26/2011

Disclosure

01/28/2011

CPE

ready

CVSS

6.3

EPSS

0.00258

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!