Intercom Web Kyukincho V3 CVE-2014-3881 Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	68187
Class:	Input Validation Error
CVE:	CVE-2014-3881
Remote:	Yes
Local:	No
Published:	Jun 25 2014 12:00AM
Updated:	Jun 25 2014 12:00AM
Credit:	The vendor is reported this issue.
Vulnerable:
Not Vulnerable:

Intercom Web Kyukincho V3 CVE-2014-3881 Unspecified Cross Site Request Forgery Vulnerability

Intercom Web Kyukincho V3 is prone to an unspecified cross-site request-forgery vulnerability because it does not properly validate HTTP requests.

An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.

Versions prior to Web Kyukincho V3 3.0.030 are vulnerable.

Intercom Web Kyukincho V3 CVE-2014-3881 Unspecified Cross Site Request Forgery Vulnerability

To exploit this issue the attacker needs to entice a user into following a malicious URI.

Intercom Web Kyukincho V3 CVE-2014-3881 Unspecified Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Intercom Web Kyukincho V3 CVE-2014-3881 Unspecified Cross Site Request Forgery Vulnerability

References:

• Web Kyukin V3 - Homepage (Intercom)
  
• Web Kyukin V3 - Support page (Intercom)
  
• Web Kyukincho vulnerable to cross-site request forgery (Intercom)