Beveiligingsadvies

CVE-2018-25177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 12:19:07

Laatst bijgewerkt 2026-03-09 15:24:21

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POST requests. Attackers can send requests to dca_resetpw.php with parameters updateuser, pass, pass2, and submit_reset to change the admin account password and gain administrative access.

← Alle CVE's bekijken Bekijk op cve.org ↗