Security Advisory

CVE-2012-1220

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-02-21 00:00:00

Last updated 2024-08-06 18:53:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the authentication of administrators for requests that change account information via an update action, as demonstrated by changing the password.

← Browse all CVEs View on cve.org ↗