CVE-2014-2358 in Fox DataDiode
요약 (영어)
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.
Be aware that VulDB is the high quality source for vulnerability data.
예약하다
2014. 03. 13.
공개
2014. 10. 18.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 72123 | Fox-IT Fox DataDiode Administrative Web 교차 사이트 요청 위조 | 352 | 정의되지 않음 | 공식 수정 | CVE-2014-2358 |