medium6.8
CVE-2014-5361
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of a…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) start, (2) stop, or (3) restart services via a request to remote/serverServices.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Landesk | Landesk Management Suite | through 9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
- http://www.securityfocus.com/archive/1/535286/100/0/threaded
- http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
- http://www.securityfocus.com/archive/1/535286/100/0/threaded