CVE-2014-2358CWE-352

Fox-IT DataDiode Appliance CSRF

Medium · published October 19, 2014

CVSS v2.0
4.3
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.

The record
Technical detail
CVSS v2.0
4.3 · MEDIUM
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2014-10-19T01:00Z
EPSS history
Timeline
  • 19 OCT 01:00Z
    Fox-IT DataDiode Appliance CSRF
    cvelistv5