CVE-2014-6253

Published Dec 15, 2014

Last updated 9 years ago

Overview

Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hijack the authentication of arbitrary users, aka ZEN-12653.
Source
cve@mitre.org
NVD status
Analyzed

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
6.4
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-352

Social media

Hype score
Not currently trending

Vendor comments

  • ZenossAddressed in versions 5.1.2 and 4.2.4.SP863. Will be also addressed in next 425 maintenance release.

Configurations