medium4.3
CVE-2011-5223
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victim…
Impact
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cacti | Cacti | through 0.8.7h Versions 0.5, 0.6, 0.6.1, 0.6.2, 0.6.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.cacti.net/view.php?id=2062
- http://forums.cacti.net/viewtopic.php?f=21&t=44116
- http://forums.cacti.net/viewtopic.php?f=4&t=45871
- http://secunia.com/advisories/47195
- http://www.securityfocus.com/bid/51048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71792
- http://bugs.cacti.net/view.php?id=2062
- http://forums.cacti.net/viewtopic.php?f=21&t=44116
- http://forums.cacti.net/viewtopic.php?f=4&t=45871
- http://secunia.com/advisories/47195
- http://www.securityfocus.com/bid/51048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71792