CVE-2013-3935
Summary
| CVE | CVE-2013-3935 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-01-02 15:15:00 UTC |
| Updated | 2020-01-07 19:28:00 UTC |
| Description | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Opsview | Opsview | All | All | All | All |
| Application | Opsview | Opsview | All | All | All | All |
| Application | Opsview | Opsview Core | All | All | All | All |
| Application | Opsview | Opsview Core | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| opsview4.4:changes - Opsview Documentation | MISC | docs.opsview.com | Broken Link |
| opsview-core:changes - Opsview Documentation | MISC | docs.opsview.com | Release Notes |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.