Cumin Web Interface Multiple Cross Site Request Forgery Vulnerabilities
BID:64429
Info
Cumin Web Interface Multiple Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 64429 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4405 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2013 12:00AM |
| Updated: | Dec 17 2013 12:00AM |
| Credit: | Tomáš Novácik of the Red Hat MRG Quality Engineering team. |
| Vulnerable: |
Redhat Enterprise MRG v2 for Red Hat Enterprise Linux Version 6 Redhat Enterprise MRG v2 for Red Hat Enterprise Linux Version 5 Cumin Cumin 0 |
| Not Vulnerable: | |
Exploit / POC
Cumin Web Interface Multiple Cross Site Request Forgery Vulnerabilities
To exploit these issues an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit these issues an attacker must entice an unsuspecting victim to open a malicious URI.
References
Cumin Web Interface Multiple Cross Site Request Forgery Vulnerabilities
References:
References:
- Cumin wiki page (Edgewall Software.)
- Red Hat Enterprise MRG Grid 2.4 security update (Red Hat)
- Red Hat Enterprise MRG Grid 2.4 security update (Red Hat)
- Red Hat Enterprise MRG Homepage (Red Hat)