Security Advisory

CVE-2011-0650

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-01-28 15:00:00

Last updated 2024-08-06 21:58:26

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018.

← Browse all CVEs View on cve.org ↗