Security Advisory

CVE-2015-6545

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-09-03 17:00:00
Last updated 2024-08-06 07:22:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.