CVE-2014-2358 in Fox DataDiode
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/13/2014
Disclosure
10/18/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 72123 | Fox-IT Fox DataDiode Administrative Web cross-site request forgery | 352 | Not defined | Official fix | CVE-2014-2358 |