PT-2010-3854 · Accoria · Accoria Web Server
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Accoria Web Server (aka Rock Web Server) version 1.4.7
Description
A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack administrator authentication for requests that create user accounts.
Recommendations
For Accoria Web Server (aka Rock Web Server) version 1.4.7, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent unauthorized requests. As a temporary workaround, restrict access to the authcfg.cgi script to minimize the risk of exploitation.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Accoria Web Server