high8.8
CVE-2018-15539
Agentejo Cockpit lacks an anti-CSRF protection mechanism.
Impact
Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agentejo | Cockpit | All versions |