PT-2026-6586 · Exagate · Sysguard 6001
CVE-2020-37144
·
Publicado
2026-02-05
·
Atualizado
2026-02-05
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Exagate SYSGuard 6001
Description
The software contains a cross-site request forgery condition that enables attackers to create unauthorized administrator accounts via a specially designed HTML form. Attackers can deceive users into submitting a malicious form to the
/kulyon.php endpoint, which adds a new user with administrative privileges without the user’s knowledge.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sysguard 6001