PT-2015-7258 · Resource Data Management · Data Manager
CVE-2015-6468
·
Publicado
2015-09-25
·
Atualizado
2015-09-29
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Resource Data Management Data Manager versions prior to 2.2
Description
A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified.
Recommendations
For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication checks to minimize the risk of exploitation.
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Data Manager