medium6.8
CVE-2012-2605
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hi…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bradfordnetworks | Network Sentry Appliance Software | through 5.3 |
| Bradfordnetworks | Network Sentry Appliance | Versions ns500rx, ns500x |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IySO
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IySO