PT-2015-7268
CVE-2015-6493
·
تاريخ النشر
2015-10-28
·
تاريخ التحديث
2015-10-28
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Infinite Automation Mango Automation versions 2.5.x through 2.6.0 build 430
Description
A cross-site request forgery issue allows remote authenticated users to hijack the authentication of victims. The exact vectors used for the attack are not specified.
Recommendations
For versions 2.5.x through 2.6.0 build 430, update to a version that includes a fix for this issue to prevent authentication hijacking.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾