CVE-2013-0214 in Samba
摘要 (英语)
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
预定
2012-12-06
披露
2013-02-02
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 7563 | Samba SWAT 跨网站请求伪造 | 352 | 概念验证 | 官方修复 | CVE-2013-0214 |