PT-2012-5677
CVE-2012-4943
·
تاريخ النشر
2012-11-18
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Agile FleetCommander versions prior to 4.08
Agile FleetCommander Kiosk versions prior to 4.08
Description
The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify passwords, accounts, or permissions due to multiple cross-site request forgery (CSRF) vulnerabilities.
Recommendations
For Agile FleetCommander versions prior to 4.08, update to version 4.08 or later.
For Agile FleetCommander Kiosk versions prior to 4.08, update to version 4.08 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾