CVE-2013-2692 in OpenVPN

Resumen (Inglés)

Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.

Reservar

2013-03-26

Divulgación

2014-05-13

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
8637	OpenVPN Admin Web falsificación de solicitudes en sitios cruzados	352	No probado	Arreglo oficial	CVE-2013-2692