high8.8
CVE-2013-3935
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication o…
Impact
Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opsview | Opsview | before 4.4.1 |
| Opsview | Opsview Core | before 20130522 |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822
- http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes
- http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822
- http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes