PT-2012-4050

CVE-2012-2447

·

Published

2012-07-09

·

Updated

2012-07-10

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Netsweeper WebAdmin Portal (affected versions not specified)
Description A cross-site request forgery (CSRF) issue exists in the accountmgr/adminupdate.php file of the WebAdmin Portal. This allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-352: Cross-Site Request Forgery (CSRF)
Related identifiers
CVE-2012-2447
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com