PT-2019-13980

CVE-2019-15089

·

Published

2019-09-20

·

Updated

2019-09-20

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0
Description An issue was discovered where forms have no CSRF protection, allowing an attacker to execute actions as the administrator.
Recommendations For PRiSE adAS version 1.7.0, consider implementing CSRF protection to prevent attackers from executing actions as the administrator. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-352: Cross-Site Request Forgery (CSRF)
Related identifiers
CVE-2019-15089
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com