Security Advisory

CVE-2014-1990

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-04-19 19:00:00
Last updated 2024-08-06 09:58:15
Assigner jpcert
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords.